User Guide

2

Table of Contents

Table of Contents 2

I'm an administrator and need to install and configure Application Manager 5

Apps Dashboard 16

Configuration Wizard 18

Downloads 23

I'm a new user and want to learn the basics of Application Manager 24

Application Resources 25

Application Tokens 26

Overview of User Roles and User Access 28

Register New User 29

User Sign In 31

Reset Password 33

Security 34

Authentication 35

Configure Portal for ArcGIS 38

Roles 45

Role Privileges 48

Description of Access Levels 51

3

Users and User Roles 52

Map User Claims 55

Security Settings 56

Access Tokens 64

Databases 66

Configuration Store 67

Data Sources 73

LRS Metadata 80

Import Seed Data 83

Export Seed Data 84

Support 85

Server Logs 86

Web Service Tool 90

Settings 91

Mail Server 92

Licensing 93

General Server Settings 94

SQL Command Settings 100

File Path Settings 105

Scheduling Service Settings 107

Applications 109

4

Installed Applications 110

Application Profiles 112

Application Settings 114

Integrations 122

Actions 126

I'm seeking to expand my knowledge of Application Manager 128

Advanced Configurations 129

Application Architecture 134

Application Security 139

Installation Errors 140

Installing TDS to a new (non-default) Website in IIS 145

Manual Installation 149

Options and Silent Installs 151

Scalability and Performance 153

Services API Reference 158

Frequently Asked Questions (FAQs) 159

5

I'm an administrator and need to install and configure Application

Manager

Take a lookat the following to install and set up ApplicationManager and your other Transcend applications in a flash.

Installation Requirements

Please review and familiarize yourself with the following requirements below prior to installation.

Review the Application Architecture requirements and recommendations.

Requirements:

System Requirements

 .NET 4.5 (or higher)

.NET 4.5 Download

WindowsServer 2008 (or higher)

Microsoft'sWindowsServer 2008 SystemRequirements

Internet Information Services7.0 (or higher)

Microsoft's IIS 7.0 Hardware Requirements

User Requirements

Modern web browser

Chrome

Firefox

IE 11+

Safari

Software RequirementsNo ESRI ESRI Software

Products An LRS DatabaseConnection

ArcGISServer

Roads &Highways

ESRIGeodatabase

ArcGISDesktop

TSS Soft-ware

6

Web Road Ana-lyzer

Required Required Optional Optional TDS, RE(for print-

ing)

Segment Ana-lyzer

Required Required Optional Optional Optional TDS

ValidationAssistant

Required Required Optional TDS

HPMS Assist-ant

Required Required Optional Optional Optional TDS, SA,VA

ReportEngine

Required TDS

Road VideoViewer

Required TDS

Job Exe-cution Man-

ager

Optional Optional Optional

PavementLayer Viewer

Required Required Optional

Desktop IntersectionManager

Required Required Optional Required

Route Dom-inance Man-

ager

Required Required Required Required

Note: Depending on what products you will be installing, and running, amap servicemaybe required to be publishedthrough ArcGISServer and accessible from applications to consume data through themap service – see “Data Sources”for more information on configuring themap service URL.

ArcGIS Product Version Compatibility

Web Desktop

Products Road Ana-lyzer

SegmentAnalyzer

Val-idationAssistant

HPMSAssistant

ReportEngine

RoadVideoViewer

Inter-sectionManager

RouteDom-

inanceManager

ArcGIS10.2

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Not Sup-ported

Not Sup-ported

ArcGIS10.2.1

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Not Sup-ported

Not Sup-ported

ArcGIS10.3

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Compatible Compatible

ArcGIS10.3.1

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Compatible Compatible

7

ArcGIS10.4

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Compatible Compatible

ArcGIS10.4.1

Supported Supported Supported Supported Supported Supported Supported Supported

ArcGIS10.5.0

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

Com-patible

**Not Sup-ported

Compatible

ArcGIS10.5.1

Supported Supported Supported Supported Supported Supported Supported Supported

ArcGIS10.6.0

Supported Supported Supported Supported Supported Supported Supported Compatible

ArcGIS10.6.1

Supported Supported Supported Supported Supported Supported Supported Compatible

Com-patible

The product is no longer fully supported against this version, but is likely still compatible. Transcend doesnot offeranyguarantee of compatibility.

Supported The product is tested and fully functional. Product modificationswill bemade if an incompatibility is discovered.

Not Sup-ported

The product is not compatible.

*Not Sup-ported

The product is under development andmaybecome compatible in the future.

**Not Sup-ported

The product is not compatible due to an ESRI defect that was fixed in a later version.

For New Installations

Follow the installation stepsbelow to install TDS (AppManager) and our web applications.

1. Run the TDS (App Manager) Installer

Double click the installer to run it. The TDS installer will be named tds-<version> (ex: tds-3.9.0). Then browse to the location youwish to install TDSand clickNext.

8

Tip: Clicking View Installation Guide will bring up this topic in the user guide.

2. Agree to the End-User License Agreement

Read and agree to the license agreement then clickNext.

9

Note: You can preview the license agreement here.

3. Select your authentication method

Choose your authenticationmethod and rename the IIS (Internet Information Services ) Site, Application and/or Application Pool ifdesired then clickNext. An overview of each option is outlined below.

10

SelectingUse application's built-in users/roles for authentication will allow you to register and create user roles thatwill be stored in the applicationsdatabase.

SelectingUse Integrated Windows Authenticated (Active Directory) will allow you to use Active Directory users/rolesacross your applications.

IIS Site Name: leave default or enter a new name. This is set to Default Web Site ("WEBAPP") bydefault.

IIS Application name: leave default or enter a new name. This is set to tds bydefault.

IIS application pool: leave default or enter a new pool. This is set to TDSAppPool bydefault.

Note: Recommended: Leave Launch application after install checked to launch AppManager once installation iscomplete.

4. Install the application

If you'd like the installer to install all other Transcend web applications located in the selected installation directory (or sub-directories),select the option toAutomatically run other installers in this directory. Otherwise, click Install to run the TDS installation.

11

Once you click Install, a series of confirmation promptswill open. ClickOK to confirm each prompt.

The application should now load in your default browser window if Launch application after installwas left checked.

5. Run Application Installer(s)

Repeat steps1-3 above for each web application installer.

Tip: While this step is not required, it willmake the configuration process in AppManager gomore smoothly if all of theapplicationsare installed prior to running through the ConfigurationWizard.

6. Run the App Manager Configuration Wizard

Tip: This is the quickest and easiest way to get started with AppManager. The ConfigurationWizard will walk youthrough importing your seed data file (if we provided you one) and all the core configuration settingsneeded to get upand running with all of our web applications.

Further detailed information on the underlying web application framework that AppManager sits on top of, including additional install-ation guidelinesand technical specifications, see the Expanding Knowledge section.

Updating an Existing Installation

12

To update the application, simply run the new installer and the previousapplication version will automatically be updated to the newone. If you are using any configuration store other than the default (SQL Compact Edition), then it is recommended that you create abackup of the configuration store database prior to upgrading any software.

To upgrade the application in a replicated environment (behind a load balancer)

When upgrading software in a replicated environment (multiple machines running TDS), the following steps should be taken:

1. Make a backupof the TDS configuration store database.2. In IISManager,stop the application pool for each replicated instance (Note: the default TDSapp pool is TDSAppPool).3. Install the latest applications (run all installers) on one of the replicated servers.

1. Repeat this steps for each of the replicated servers.2. Test each server independently and then test access through the load balancer (once all servers have been

brought backonline)

To uninstall the application

1. Navigate to Programsand selectUninstall for TDS.

2. ClickUninstall on the confirmation popup.

13

3. The TDSSetupWizard will open. ClickNext.

4. SelectRemove from the list of options then clickNext.

14

5. Select the itemsyou wish to remove, then clickRemove.

To uninstall all Transcend products, selectUninstall all Transcend Spatial Solution's products (in additionto this one).To automatically remove the TDS folder (including anydata or files/folders contained therein) after uninstalling,selectPerform complete uninstall (this action will delete the location folder)

15

6. ClickFinish to complete the uninstall.

Note: The application installer will automaticallymake a copyof the application'sweb.config and configuration database(if it is using SQL Server Compact) before performing the upgrade. If you are not running a standard configuration, it isrecommenced to backup your filesmanually.

Heads Up! Whenever a product installer is run, the application will automatically be taken offline. If you are not running astandard configuration, we recommend youmanually take the application offline. Thiswill ensure it is not accessible to thepublicwhich could interfere with the installation process.

GoogleMaps and BingMaps API Disclaimer

GoogleMaps: AllGoogleMapsJavaScript API applicationsare subject to the limitationsof Google's Termsof Service. Therefore touse any imbeddedGoogleMap toolswithin the applications, you will need to adhere to Google's Termsof Service - this typicallymeans you need to purchase an enterprise license. To learnmore please visit GoogleMaps' Get a Key/Authentication page.

BingMaps: Using the BingMapsAPI in authentication restricted applicationsmay require the purchase of the BingMapsAPILicense. Please refer to their BingMapsAPI licensing options for more information.

16

Apps Dashboard

The AppsDashboard is found on themain screen of AppManager and providesquick access to all your installed applicationsandapplication profiles.

Usage

1. Hover over the application you wish to launch.

17

2. Select the application profile from the list of available profiles and click the link to launch that profile.

Tip: If you do not see an application or application profile you expect to see in the AppsDashboard, contact your siteadministrator. If you are an administrator, you can also Run the ConfigurationWizard if you are installing apps for thefirst time or create a new Application Profile.

18

ConfigurationWizard

TheConfigurationWizard is the quickest way to get up and running with our web applications in your environment.

Usage

The get started, simply click theRUN CONFIGURATION WIZARD button on AppManager'smain screen and follow the instruc-tionson screen to complete each of the following steps:

1. Import Your Seed Data

If we provided you a seed data file, drag and drop the file into the dashed import box.

Note: The seed data file is a json file that contains details for anyapplication configurations that we have pre-configuredfor you.

ClickSKIP THIS STEP if you do not have a seed data file.

19

2. Configuration Database

ClickUse the Default if you wish to use the default database. Bydefault AppManager will store your configurations in a local filedatabase (.sdf file) on the server.

If you'd like a specify the database used, clickSpecify a Database and enter your database details into the provided form.

You can test that your database connection is successful by clicking TEST CONNECTION.

3. Import Your License

Drag and drop the ".LIC" file we provided to you into the dashed import box to add your software license information. Once added,you'll be able to see your license ID, license type, who it's registered to, when it expires aswell as all the products and featuresincluded in your license.

20

4. Administrator Account

This step asks you to set up themain admin user for AppManager. This account is the backup account and has complete admin-istrator privileges to this application. To add, simply provide a User Name, First Name, Last Name, Email, and Password in theprovided fields and click "Register."

21

5. Define Roles

Rolesprovide amethod in which to group application privilegesbyAppManager allowsyou to pre-set roles for a standard usersgroup and an admin group acrossall your applications. Use the form to create a standard user group and an admin group role name.

Note: If you are, or will be using, active directory roles then youmust prefix your role/group nameswith the domain name.For example: MY_DOMAIN\Admins. Also, leave role namesblank to prevent the application from automatically assigningprivileges.

6. Enter Your Data Sources

Data sourcesprovide access to your data from all your applicationsand tools. See the Data Sources topic for step-by-step instruc-tionson how to add a data source.

22

7. Setup Application Profiles

Application profiles provide the ability to createmultiple configurations for the same application. See the Application Profiles topic forstep-by-step instructionson how to add andmanage profiles.

23

Downloads

TheDownloads feature is accessible from the topmenu and allowsyou to download available supporting software and applicationfiles provided byTranscend. The available downloads listed is dependent on the applications you have installed.

Usage

To download supporting software or an application file:

1. Click theDownload button for the item you wish to download.

2. The file will then download to your computers downloads folder.

To seed a file:

If the file is typically "seeded" in AppManager or the application, it will have an Actionsoption listed next to it.

1. Click theActions dropdown.2. Confirm the option to seed the file listed in the dropdown.

24

I'm a new user andwant to learn the basics of ApplicationManager

Sound like you? You've landed in the right place. You're new to AppManager and want to learn the key components. Delve into theinformation below and you'll be an experienced user in no time!

Application Resources - various topics covering global application featuresand settings

Overview of User Rolesand User Access

Administration Console

The Administration Console providesaccess to all configuration settingsavailable in AppManager.

Security - configure your authenticationmechanism, security settings, roles, privileges, and assign users to roles

Databases- configure where to save your data, add database connections, and import seed data

Support- view server logsand execute web service calls

Settings- configure your general server, file path settings, andmanymore

Applications - create andmanage application profiles

Actions - options that affect the entire application

25

Application Resources

The following topics cover variousapplication featuresand functionality that are utilized acrossour applications.

Output Table Tokens - use tokens in output tables names to dynamically name output tables using a variety of tokens

Geodatabase VersioningWorkflows - overview of how geodatabase versionsaremanaged in workflowsutilizing both trans-actional data, mash up tablesand viewsacrossmultiple applications

26

Application Tokens

Several of our applicationsalready support the use of tokens to dynamically name output tables and the rest of our applicationswillsupport this feature in the near future. The tokensare used to construct the table name in the application's user interface and thenserver-side code is used to rename the table once it is output.

Usage

To use, simply include the token in the table name.

Available tokens:

The following tokens can be used in a table name aspart of a string or by themselves:

{Username} - The authenticated username

{UserFirstName} - The authenticated user's first name

{UserLastName} - The authenticated user's last name

{AuthType} - The type of authentication used for the authenticated user

{Unique} - Will insert a unique string (it will be a new GUID)

The following tokens can be used in a table name as the suffix of a string:

{Timestamp} - Will insert an EPOCH timestamp (current time)

{Date} - Will insert the current date

Token manipulation:

You can add ":upper" or ":lower" to force the token value to be upper case or lower case.

{Username:lower} - will lower case the username value

{Username:upper} - will upper case the username value

27

Example:MY_TABLE_{UserName} becomesMY_TABLE_rgreenMY_TABLE_{UserName:upper} becomesMY_TABLE_RGREENMY_TABLE_{UserName:lower} becomesMY_TABLE_rgreen{UserName}_{Unique} becomes rgreen_F10F88CD-AF38-4AD5-A290-3CA3E3BAFBF8

28

Overview of User Roles and User Access

All features, actions, and service calls, are tied to a specific permission or privilege in the application. Privileges can be granted ordenied to any role, and users can only access functionsassigned to their role. Rather than assigning application privileges to eachuser, roles are created and assigned privileges to ensure the appropriate level of security. Users are then assigned to the role appro-priate for their job function.

Anonymous Access

If a role with the name "AnonymousAccess" exists, then anyprivilege assigned to that role will be accessible byanyone (no authen-tication necessary). This "Guest Access" should typically be configured to restrict access to any configuration components, and onlygrant access to "view-only" operations.

Authenticated Users

If you have credentials for the application you can enter them in the User Sign In area. Once you have successfully signed in, any fea-turesavailable to you (depending on your user role(s) will bemade available/visible. See the Roles, Role Privileges, and User Rolessections for information on configuring authenticated user roles.

Note: If you do not see functionality that you expect to see, please contact the site's administrator and request to have theparticular functionalitymade available to you.

Register New User

User Sign In

Reset Password

29

Register New User

TheNew User dialog provides the ability to add a new user to gain access to basic functionality in the application, aswell as per-sonalized/customized layout and settings. Administrators, or otherswith the privilege, can also register a new user in User Roles.

Heads Up! If Windowsauthentication or Security Token Service (STS) is the chosen security setting and you are part of anActive Directory or other STS you will not need to register asa new user.When you are already signed in on an Active Dir-ectory or STS network, AppManager will pick up your credentials and automatically sign you in.

Usage

To register asa new user:

1. Click the down arrowbeside the Sign In box.

2. ClickRegister from the dropdownmenu.

30

3. Fill inUser Name, First Name, Last Name,Email,Password, andConfirm Password.

Tip: Make note of your User Name and Password for future use.

4. ClickRegister.

31

User Sign In

The "User Sign In" tool provides the ability to enter your user credentials and gain access to additional functionality in the application,aswell as personalized/customized layout and settings.

Signing In

To sign in:

1. Locate the login input boxes in the upper right corner of the app.

2. Enter your username in theUser Name input box.3. Enter your password in thePassword input box.4. ClickSign in to authenticate.5. Wait for confirmation that you were successfully signed in.

Note: If you log into the app and do not log out before closing the browser session, the app will remember you and keepyou logged in the next time the app is started. Youmust log out of the application if you do not want the application toremember your login across sessions.

Signing Out

To sign out:

1. Locate the login input boxes in the upper right corner of the app.

2. Click theAccount drop-down button.3. ClickSign Out.4. Wait for confirmation that you were successfully signed out.

Account Info

Once you are signed in, you can view/edit your user information by:

32

1. Click theAccount drop-down button.2. Select the tab you want to view.

Options include:

My Info - basic account info including: User Name, First Name, Last Name and Email

MyRoles - lists of all Roles you are in and their description

MyPrivileges - view all privileges (features) that you have access to in the application

3. ClickClose to close the Account Information dialog.

33

Reset Password

TheReset Password dialog provides the ability to reset a user's password if forgotten or lost.

Heads Up! If Windowsauthentication is the chosen security setting and you are part of an Active Directory you will need tocontact your Active Directory administrator to change your password.

Usage

You can reset your password by:

1. Click the down arrowbeside the Sign In box.

2. ClickReset Password from the dropdownmenu.

3. Fill in your User Name or theEmail you registered with.4. ClickSubmit.5. Go to the email you registered with and open themessage from "transcendsld."

6. Follow the instructions in the email to complete resetting your password.

34

Security

Authentication - pick the desired authenticationmechanism to secure your application

Configure Portal for ArcGIS - configure TDS to consumePortal for ArcGIS content

Roles - create roles to assign application privileges

Role Privileges - assign application privileges to defined roles

Users and User Roles - assign your configured users to roles

MapUser Claims - map custom user claims

SecuritySettings - set up error handling, user accessand roles, etc.

AccessTokens - manage privilege authorization via access tokens

35

Authentication

AppManager'sAuthentication feature provides the ability to select the security type you wish to use to secure your applications.

Usage1. Check the security option you want the application to use.2. ClickSave to save your changes, or Cancel to cancel your changes.

Options include:

No SecurityWill disable any security checksand will leave all functionality open to anyone who hasaccess to the application and services. Thisoption should only be used during testing or on a secure network. Thismechanism can be enabled by removing anypreviously con-figured security configurationsand setting the “appSettings” key “BypassSecurity” to “True”.

Built-In SecurityWill use the application's securitymechanism - which storesandmanagesusers, roles, and privileges internally. The users, roles,and privileges can bemanaged through the application interface. Application featuresare shown/hidden based on user privilegesand servicesare secured through token-based authentication based on registered users and defined roles. Thismechanism can beenabled by removing anypreviously configured security configurationsandmaking sure the settings in the “appSettings” key“BypassSecurity” is set to “False”.

Windows SecurityWill authenticate users and roles based on the built inWindowsauthenticationmechanism. This option requires that the applicationserver (IIS) is on the same domain and has read access to the domain'sRole/Group store. The users and roles that drive this securitypolicy can be read from Active Directory or configured using the application server's user/groups functionality. Application privilegesare still stored using the applicationsbuilt in securitymechanism, but the users and roles are stored and checked using windowsauthentication - privilegesare simplymapped to windows roles/groups.

Heads Up! When using "WindowsAuthentication", youmust disable "AnonymousAuthentication" and enable "WindowsAuthentication" in IIS for this application.

Security Token Service (STS)

36

Will authenticate users and verify roles based on the configured Security Token Service (STS) metadata. An STS is the service com-ponent that builds, signs, and issues security tokensaccording to theWS-Trust andWS-Federation protocols. An STS can be acloud STS such asa LiveIDSTS, a pre-built STS such asActive DirectoryFederation Services (ADFS) or a customSTS. On authen-tication, STS should return identity information such asname, e-mail addressand roles as claims.

Heads Up! When using the federation (STS) securitymechanism, youmust make sure that all roles and privilegesare com-pletely, and correctly, setup to work in the "STS" configuration/environment before applying this security profile. Youmusthave an "admin-equivalent" role setup with all privilegesassigned to it, so that your federated identitywill be able to login asan "administrator." You will not be able to login with anybuilt-in application accounts after applying this securitymechanism.Before applying this setting, you will need to change the Administrator role name in Rolesand then update the "AdminGroup Role" in the appsSecuritySettings.

To Use

1. Enter theSTS Metadata Location - this iswhere the service is located.2. Enter RealmandAudience URL - these two parameterswere used to set up the service andmust match or there will be

an error.

3. Optional:Enter the protocolmessageName andValue parameters.4. ClickSave.

IdentityServer

Will authenticate users and roles against IdentityServer3. IdentityServer is a frameworkand a hostable component that allows imple-menting single sign-on and access control for modern web applicationsand APIs using protocols like OpenID Connect andOAuth2. Itsupports a wide range of clients likemobile, web, SPAsand desktop applicationsand is extensible to allow integration in new andexisting architectures. You can learnmore about this option here: IdentityServer Documentation.

To Use

37

1. Enter theAuthority,Client Id,Redirect URL, andUser Info Client URL.2. ClickSave.

Note: More details and information regarding security can be found in theApplication Security topic.

Tip: If you're looking for information regarding authenticating with ArcGISPortal, please refer to the Configure Portalfor ArcGIS topic.

38

Configure Portal for ArcGIS

TDS can be configured to allow its’ applications to consumemap service data from a securedmap server federated with an ArcGISPortal.

Overview

When TDS is properly configured to consumePortal for ArcGIS content, when accessing an application that consumes this data, thefollowing work flow will be observed:

1. User launchesa TDSapplication that hasa data source which is pointing to a secureMap Server (federated with Portal forArcGIS).

2. The application will provide a dialog asking the user to “Sign In” with Portal.

Note: It is necessary to have the user confirm this action in order to prevent the browser popup blocker fromblocking the next step.

3. Once the user clicks theSIGN IN button, a popup window will open, and the user will be presented with the Portal for ArcGISauthenticationmethod (the exact method varies per Portal configuration).

4. Once the user is authenticated, within Portal for ArcGIS, the popup window will close, the dialog will disappear, and theapplication will continue loading asnormal.

5. The token will automatically be refreshed with Portal (behind the scenes) for as long as it can. However, once the token canno longer be refreshed the user will be required to repeat steps2 through 4 to obtain a new access token.

Usage

To allow TDSapplications to consume data from a securedmap service which is federated with Portal for ArcGIS, the following stepsmust be taken:

Setup Application within Portal

1. Sign into your Portal for ArcGIS instance.2. Go toContent.

39

3. ClickAdd Item>An Application.

4. SelectApplication.5. Enter a Title.

1. Suggestions:

1. DEVEnvironment TDSPortal App

2. STGEnvironment TDSPortal App>

3. PRD Environment TDSPortal App

4. etc

6. Enter Tags.

40

7. ClickAdd Item.

8. On the newly created Application page, click theSettings tab.

9. Under theApplication panel, enter theURL the to TDSApplicationManager site.1. Thiswill allow users to quickly launch TDS fromwithin your Portal for ArcGIS site.

41

10. Click theUpdate button.

11. Enter in a redirectURI that will point back to the following URL:1. YOUR_TDS_URL/apps/portal-auth.html

1. Example:

1. https://tsstools.com/tds/apps/portal-auth.html

Note: ThisURImust match the exact URL that will be used to accessTDS.

Note: It is recommended to add both http and https protocols.

2. Example:

1. http://tsstools.com/tds/apps/portal-auth.html

2. https://tsstools.com/tds/apps/portal-auth.html

Note: It is recommended to add both the external domain (if applicable) aswell as thePC name of the TDS server (or whatever URLswill be used to access the TDS site), tocover both internal and external access (if applicable).

3. Example:

1. https://tsstools.com/tds/apps/portal-auth.html

2. http://MY_TDS_SERVER_NAME/tds/apps/portal-auth.html

Note: Ensure that you click “Add” to add the Redirect URI to the list

12. ClickUpdate to accept the added Redirect URIs.13. Make note of theApp ID value. You will need it to enable Portal for ArcGIS authentication for your data source in AppMan-

ager.

Configure Portal Settings in TDS

42

1. Load AppManager (TDS) application and log in with an Administrator account.

2. Go to theAdministration page (button is accessible from the top navigation bar).

3. Click theApplication Settings link under the Applicationsgroup heading.

4. Enter anArcGIS Server Geometry Service URL that is hosted on the securedmap service (federated with Portal forArcGIS).

5. Enter anArcGIS for Portal URL.6. Enter aPortal App IDwhich is theApp ID value noted in the previous step above.

7. Click theSave button (located in the bottom right corner of the page).

8. Portal is now configured within TDS, however an application will only try to authenticate with Portal for ArcGISwhen a datasource ismarked as “Service requiresArcGIS for Portal authorization”. See below to enable that setting.

Enable Portal for ArcGIS Authentication for a Data Source

1. Navigate to theAdministration page within TDS’sAppManager.

43

2. Select theData Sources link under theDatabases group heading.

3. Edit (or create) the data source that is configured to use a securemap service (federated with Portal for ArcGIS).

4. Ensure that theAssociated Service URL is configured to point directly to the securemap service.5. Check theService requires ArcGIS for Portal authorization checkboxoption.

6. ClickSave.7. Anyapplication that uses this data source will now initiate the sign in processwith Portal (when applicable).

To Test Portal for ArcGIS Authentication for an Application

1. Load an application profile that is using a data source that ismarked asService requires ArcGIS for Portal author-ization.

2. Ensure that the application prompts the user to authenticate with Portal for ArcGIS (asdescribed in the “FunctionalityOver-view” section above).

To Diagnose Portal for ArcGIS Authentication Issues

If an issue occurs during portal authentication, review themessage that will be displayed in the Portal popup window or review theapplication logs (found under Help > Logs). The following is a list of commonmisconfigurationsand diagnostic steps:

Redirect page stuck on ArcGIS Page with message of “Invalid redirect_uri”Issue: Thismessagemeans that the redirect URL configured within Portal for ArcGIS is not the sameURL that theuser is accessing the site from.

44

Solution: Compare the base of the URL from the browser of the application with the URL that was configured withPortal for ArcGIS. Update the “Redirect URI” to include a valid URL.

Tip: You can copy the URL of the popup window and run the URL through anyHTML/URL decoderto see what the exact redirect URL is being passed to Portal (it will be present asa query parameternamed “redirect_uri”.

45

Roles

TheRoles feature provides the ability to create roles to assign application privileges to, or to enter Active Directory (WindowsSecur-ity) roles (see note on windowssecurity below).When you use the RUN CONFIGURATIONWIZARD tool, you are prompted to cre-ate a standard authenticated user group role and an admin user group role. However, you have the freedom to create asmanyroles, internal or external, as you like and assign privileges to those roles as you see fit for your organization.

If you are using Active Directory or Security Token Service your Role Names for these groupsmust match the equivalent role namein your Active Directory or Security Token Service. Under certain AD configurations youmanyneed to delete all roles that are not inActive Directory even if theyare not being used by the user. The application doesnot know what role the user is in, it only knowswhatroles are necessary to gain access to each privilege and then asksActive Directory if the user is in each of those roles.

Usage

Add New Role

46

1. Click+ Add New. A new role form opens.

2. Enter a name in theRole name input box.3. Select a role in theCopy privileges fromdropdown list to populate a default set of privileges for the new role.

Note: Once the role is created, use the Role Privileges tab tomodify the privilegesassigned to the new role.

4. If the role is external, check the boxbeside Is role external?.

Note: This is dependent on your selected Authenticationmechanism.

5. Enter a description in theRole description input box.6. ClickSave to save the new role.

Edit a Role

1. Click theEdit icon in the Actions column for the role to be edited.2. Edit theRole name, Is role external selection, and/or Role description.3. ClickSave to save your changes, or Cancel to cancel the operation.

Delete a Role

47

1. Click theDelete icon next to the role to be deleted. A confirmation dialog is displayed.2. ClickDelete to delete the role, or Cancel to cancel the operation.

Heads Up! When the application is configured to use "WindowsSecurity", youmust still "create" the roleswithin this com-ponent, that you want to use from Active Directory.When using active directory roles youmust also prefix your role/groupnameswith the domain name. Youmust enter the exact name of the Active Directory role/group that you want to assign"privileges" to. The workflow is identical to setting up internal roles, except you do not need to assign the user to the rolebecause the user/role relationship is already configured in Active Directory (groups). Creating the role within this com-ponent, that matches the Active Directory role is necessary because you need to be able to assign application privileges tothat role.

Note: Leave role namesblank to prevent the application from automatically assigning privileges.

48

Role Privileges

TheRole Privileges feature provides the ability to select and assign privileges to roles that have been defined in Roles. All availableapplication privilegesare listed andmanaged from this tool. Theyare categorized and can be filtered by:

Group - the application or component the privilege belongs to

Suggested Level - the suggested user access level for the privilege ("Description of AccessLevels" on page 51)

Usage

Tomodify the privilegesassigned to a role:

1. Select a role from theRole dropdown list.2. Check/uncheck the privileges you wish to assign/unassign to that role.3. ClickSave button.

Heads Up! The roles set for the Admin group and Standard user's group in SecuritySettingsare automaticallymanaged, so any changes youmake to their privilegeswill not hold.

List Options

Search the list

1. Click the search icon to expand the search field.2. Start typing the name of an app, privilege or keyword.3. The list will update to showmatching items.

Filter

49

The Filter options lets you filter the groups, privileges, suggested levels, and/or descriptions you want shown in the list.

1. ClickFilter.2. Enter the criteria for the groups, privileges, suggested levels, and/or descriptions you want filtered into the applicable box.

Tip: ClickFilter again to close the filter and refresh the privileges list.

Add to Selection

The Add to Selection option lets you filter to list by suggested level.

1. ClickAdd to Selection.2. Select a level from the dropdown.

3. The list will update to show all privileges that match the selected level.

Close/Open Privilege Groups

You can filter the privilege list by group.

50

Click the +or - to open/close the group

Click the +or - icon in the table header to open/close all the groups

Select All/Deselect All

1. Click the checkmark in the table header to checkall items in the list at once.2. Click the checkmark in the table header again to uncheckall items in the list at once.

51

Description of Access Levels

Anonymous

General unauthenticated access. Provides read accessand basic functionality. Typically the access level provided to pub-lic, non-logged in users.

User

Providesall Anonymousprivileges, plus general authenticated access. Extends read functionalitywith the ability to sendemails, perform queries, update some itemsaswell as other functionality typical of a standard logged in user.

Admin

Providesall Anonymousand User level privileges, plus general admin access, such as the ability to edit and delete someitemsaswell asmanage data sourcesand profiles.

Super Admin

Providesall Anonymous, User and Admin level privileges, plus super admin access, such as the ability to add apps, man-age application configuration aswell as edit databases if applicable.

52

Users and User Roles

TheUser Roles feature provides the ability to search, add, andmanage users in your defined roles.

Note: To be able to assign of internal roles to external users, you will need to enable Just-in-time (JIT) provisioning in theSecuritySettings. That will enable the application to create an internal application user based on an external user's inform-ation.

Usage

Add New

To add a new user:

53

1. Click+ Register New User to open the new user registration form.

2. Fill in the First Name, Last Name,User Name, andEmail.3. Enter a password in thePassword field and then enter it again in theConfirm Password field.4. ClickRegister.

Search User list

1. Click the search icon to expand the search field.2. Start typing the name of a user.3. The list will update to show thematching user(s).

4. ClickRefresh to refresh the user list.

Edit User

To edit an existing user:

1. Locate the row for the User whose roles you want to edit and clickEdit (pencil icon).2. Select the roles you want to add the user to by clicking the checkmark in the far left field beside the Role. To remove the

user from a role, click the checkmark to uncheck it.3. ClickOK.

Delete User

54

To delete a single existing user:

1. Locate the row for the user you wish to delete and click theDelete icon.2. ClickDelete in the confirmation popup.

To delete multiple users:

1. In the users list, find the users you wish to delete and click the checkmarks to the left of them.2. ClickDelete Selected in the Template table header.3. ClickDelete in the confirmation popup.

55

MapUser Claims

TheMapClaims feature provides the ability to map custom user claims.

Usage

Add New

1. Click+ Add New to open the new claim form.

2. Select a claim in theSystem claims dropdown list.3. Enter the custom claim in theCustom claim input box.

4. ClickSave to save the new claim.

Search Existing

1. Click the search icon to expand the search field.2. Start typing the name of a claim.3. The list will update to show thematching claim(s).

4. ClickRefresh to refresh the list.

Delete Existing

To delete an existing claim:

1. Click the trashcan icon on the line of the CustomClaim you want to delete.

56

Security Settings

Changes to security related configurations, such as token expiration time or what servers the applications canmake requests from,are set in SecuritySettings.

Tip: If you want to hide or expand one of the sections, click the square at the end of the section name.

Usage

Error Handling

Error Message Details Policy

This sets the policy for returning application (server-side) errors.When errors are hidden, the application will give a generic "An erroroccurred" message, but when errors are shown the user will get a detailed error message. Available optionsare: Hide all errors,Show all errors, and Show errors on server only.

To Use:

57

1. Select the desired option from the dropdown.

2. ClickSave at the bottom of the page.

Token Authentication

Access Token Expiration Days

This sets the number of days that a user can stay logged in without needing to sign in.

To Use:

1. Enter the desired number of days.

2. ClickSave at the bottom of the page.

Prevent Auto Sign Out Feature

This prevents the default behavior of the application forcing all users to re-authenticate the next time they sign into the applicationwhen changesaremade to any role or role's privileges.

To Use:

1. Check/uncheck the boxbesidePrevent Auto Sign Out Feature.2. ClickSave at the bottom of the page.

Invalidate All Tokens Before

This sets the date and time all tokenswill expire, so that all usersmust be re-authenticated.

To Use:

58

1. Click the calendar and select a date.

Tip: The time will be defaulted to 12:00 AM unless changed.

2. Or Enter in the desired date and time.

Heads Up! The expected format isMM/dd/yyyy h:mm a.

3. ClickSave at the bottom of the page.

Reset Password Token Expiration Hours

This sets the number of hours the link to reset a user's password will remain valid.

To Use:

1. Enter the desired number of hours.

2. ClickSave at the bottom of the page.

Cross Origin Resource Sharing

These optionsallow you to specifywhat servers the application(s) canmake requests from. For more information: HTTPaccess con-trol (CORS).

59

Example: If you have tdson one server and Road Analyzer on a separate server, thiswill allow Road Analyzer to makerequests to the server tds is on. Enter "*" to allow requests from all servers, or enter in the specific server(s) that you willallow requests from.

To Use:

1. Enter theAllowed CORS Origins,Headers, and/orMethods.2. ClickSave at the bottom of the page.

Access and Roles

System Administrator "Username"

The SystemAdmin is built-in and hasglobal access to everything nomatter what role/privilege theyare in and will be available nomat-ter security you choose for the application. If you used the ConfigurationWizard thiswill alreadybe filled in.

To Use:

1. Enter the desiredSystem administrator "username".2. ClickSave at the bottom of the page.

Anonymous Access Role Name

You can select the role name that has the privilegesanonymoususerswill receive.

60

To Use:

1. Select the desired role name from theAnonymous access role name dropdown list.2. ClickSave at the bottom of the page.

Auto-managed role privileges

You can select whether or not to have the role privilegemapping to be handled automaticallywithin the application itself, or be basedon the suggested privilege levels and semantically defined role types you set.

To Use:

1. To enable, check the boxbesideAuto-managed role privileges.2. ClickSave at the bottom of the page.

Admin and Standard Group Role Names

You can assign roles to admin and standard userswith default privileges. If you install anynew applications, these roleswill be auto-matically assigned privileges.

Heads Up! If you are using Active Directory or Security Token Service your Role Names for these groupsmustmatch theequivalent role name in your Active Directory or Security Token Service. If theydo not, the application will not recognize youand will be locked out.

To Use:

61

1. Select the desiredRole Name from each of the dropdowns.

Note: The optionsavailable in the dropdowns for these roles are from the Roles section. If you do not want arole, you can selectPrevent automatic privilege assignment options.

2. ClickSave at the bottom of the page.

New User's Default Role

You can set the role name that will be assigned to all new users or prevent automatic assignment of a role.

To Use:

1. Select the desiredRole Name from the dropdown.

Note: The optionsavailable in the dropdowns for these roles are from the Roles section. If you do not want arole, you can selectPrevent automatic privilege assignment options.

2. ClickSave at the bottom of the page.

Users and Registration

Enable Just-in-time Provisioning

To create a user account for external users, enable this setting.With Just-in-time (JIT) provisioning, an internal application user willautomatically be created based on the external user information.

To Use:

1. To enable, check the boxbesideEnable Just-in-time provisioning.

Note: The optionsavailable in the dropdowns for these roles are from the Roles section. If you do not want arole, you can selectPrevent automatic privilege assignment options.

2. ClickSave at the bottom of the page.

Max Users to Return

62

In Users and User Roles, thiswill set themaximum number of users the application will search for and display in the list.

To Use:

1. Enter the desired number of users.

2. ClickSave at the bottom of the page.

New User Registration Notification Email

When a new user registers in anyof the TDSapplicationsan emailwill be sent if the following information is filled out. Further con-figure this email content byadjusting the subject line and template to suit your needs.

To Use:

1. Enter the desiredEmail.2. Optional:Edit the defaultSubject Line and/or Email Template.3. ClickSave at the bottom of the page.

Password Reset

In these settings you can specify the subject line and bodyof the password reset email for your organization.

63

To Use:

1. Enter the desiredSubject Line and/or Email Template.2. ClickSave at the bottom of the page.

Reset to Default

Should you want to reset to default all security settings, clickReset and selectSave on the confirmation popup.

Heads Up! Be aware that a few other security settings that are not visible in this formwill also be reset.

64

Access Tokens

Access tokensallow you to provide authorization for one or more application privilegesbypassing in a token.

Usage

Add New

To add a new access token:

1. Click+ Add New to expand the new AccessToken form.

2. Fill in theDescription,Behavior andExpiration Date.Behavior Options include:

Token expires on specified data - this is the default setting and will auto set the token to expire in 24 hours

Delete on first use (one time use only) - token can only be used once and will expire itself immediately after use

Token never expires (valid untilmanually deleted - tokenmust bemanually deleted to expire

Tip: Deleting a token also expires it.

65

3. Select the privileges in theAvailable Privileges table that you wish the token to provide authorization for. Available priv-ilegesare based on your user role.

4. ClickSave. Once saved the token will display under the list of privileges.

5. To use the token, suffix your endpoint URLwith the token provided.

Updating Existing

To update an existing access token:

1. Locate the row for the token you wish to edit and clickEdit (pencil icon).2. Make desired changes to the form.

3. ClickSave.

Delete Existing

To delete an existing access token:

1. Locate the row for the token you wish to delete and clickDelete.2. ClickDelete in the confirmation popup.

66

Databases

Configuration Store - pickwhere to save your configuration data

Data Sources - setup database connections for your applications

LRSMetadata - setup and configure non-ArcGISServer Extension layers andmetadata

Import Seed Data - makes importing configurationseasy

Export Seed Data - easily export application configurationsasa seed file

67

Configuration Store

Your applicationsneed somewhere to keep your settingsand application changes so theyare persisted across sessions. BydefaultAppManager will store your configurations in a local file database (.sdf file) on the server. However, the Configuration Store featureprovides the ability for you tomanage this setting and specify a specific database if you choose.

Note: See the "Advanced Configurations" section for details on configuration architecture, database requirements, andother technical details.

Usage

To use the default:

1. ClickUse the Default.2. ClickSave.

To specify a database:

1. ClickSpecify a Database.2. Select a database type from theDatabase Type dropdown.

68

3. Enter your database connection string in theConnection String input box.4. ClickTEST CONNECTION to verify the connection works.

5. ClickSave.

To migrate TDS from one Configuration Store to another:

This exercise demonstratesmigrating a TDS configuration store from SQLServer Compact Edition (the default) to an enterprisedatabase (SQL Server or Oracle).

Prerequisites:

When using an enterprise database (such asSQL Server or Oracle) asa configuration store, the database should be a newempty database and the connection to this database should use a database user that is the schema owner of its ownschema (a user with read/write to its own schema only).When configuring this "Configuration Store" connection string, it isimportant to use a database user that doesnot have access to anything outside of this "TDS" configuration database - to mit-igate any risk of inadvertentlymodifying or accessing other data. Click here for more details.

Make sure the new configuration store database is empty.

Make sure the connection, which will be configured in TDS, to connect to the new configuration store database haspriv-ileges to read, create, and delete objects (only to the desired schema though).

Make a backup of the application and existing configuration store, asa precaution.

Procedure Steps:

Step One - Export current Configuration Store to a seed file

1. Install the latest available Transcend software (TDSand other applications) to insure you're running themost up to date ver-sions.

2. Launch the AppManager (TDS) application.

3. Go to theAdministration page.

69

4. Click theExport Seed Data link.

5. Select all itemsyou want to “migrate” to the new configuration store.

Heads Up! Any items that have approximately 1,000 or more records should not be exported. Thisseed export step will export to a single text file and it is not practical to export extremely large amounts of data thisway.

Heads Up! If you have the Road Video Viewer product, do not selectCamera Images or Event Points – theseitemsshould be seeded using the original seed files generated through the TIM processing tool.

70

6. Click theDOWNLOAD SELECTED button (and continue).

7. Wait for the seed file to download.

Step Two - Change the TDS configuration store

1. Launch the AppManager (TDS) application.

2. Go to theAdministration page.3. Click theConfiguration Store link.4. Select theSpecify a database option (if it is not already selected).

Note: Youmaywant to copy this original connection string in case you need to revert to this configuration store atanypoint.

5. Select the database type to change the configuration store to.

71

6. Enter the connection string to the new configuration database (see prerequisites for details on this database).

Tip: Use theExamples dropdownmenu to see available connection string examples.

7. Click the TEST CONNECTION button.

8. Verify that the connection succeeded.

9. Click theSAVE (and confirm) button.10. The applicationmay take severalminutes to swap to the new configuration store and setup the new database objects –

please be patient. It should take you back to theAdministration page once it is complete.

Note: If you receive an error message, and are locked out of the applicationmanager UI, you can always swapthe configuration store connection back to the original connection byopening the TDSweb.config file and updat-ing the connection string and provider name – for the “DefaultConnection” connection string.

11. Click theConfiguration Store link and verify that the correct new database connection information is showing.

Step Three - Apply seed file (from previous configuration store)

1. Launch the TDSapplication.

2. Go to theAdministration page.3. Click the Import Seed Data link.4. Drop the seed file (the one that wasexported earlier) into the graybox (optionally you can click on the grayboxand select

the file).

5. ClickSave.

6. After amoment, the page will show aSeeding Job History list and you should see the statusof the seed file import.

72

7. Remain on this page until it is complete – it can take severalminutesdepending on the amount of data being imported.

8. Once the seed file process is complete, you can click on theDetails link to check for any import errors.

9. Check the Last Message details to verify that there are 0 errors.

10. At this point the new configuration store should be restored to the previous (based on what you selected to export to theseed file).

11. Navigate through the AppManager Administration andApps pages to verify that all the expected profiles and settingsare in place.

12. Test each application and verify that all data and settingsare present.

73

Data Sources

Data Sourcesprovide a way to add, remove, and update the data sources that you wish to have access to within the application.

Usage

Add New

To add a new data source:

1. Click+ Add New to expand the new Data Source form.

Note: For different data base connection examples, clickExamples in the upper right corner and select theexample that best matches your connection type.

74

2. Fill in theName,Description, andDatabase Type.3. Enter theConnection String. Use the Test Connection button to verify the string.

Click if entering a data source for a Configuration Store1. You have the option here for AppManager to automatically create a Configuration Store database for you on your

selected database.

2. Click the down arrow on the TEST CONNECTION button and clickTest and create database if none exists.

4. Enter theAssociated Service URL.5. If you want the application to authenticate with ArcGIS for Portal, check the boxbesideService requires ArcGIS for

Portal authorization.

Heads Up! If you selected this option, you will need to ensure that TDShasbeen configured to use Portal forArcGIS. See the Configure Portal for ArcGIS topic for more details. You will also need to add your ArcGIS forPortal URL in the Application Settingsof AppManager.

6. Optional:ClickMore Options to enter the following information about your data source:a. Description - enter a description of the data source.b. Database Schema/Owner - enter the schema or owner of the database.c. Spatial Reference ID (SRID) - enter the spatial reference ID (SRID) assigned to the database.

7. ClickSave.

Search the list

1. Click the search icon to expand the search field.2. Start typing the name of a data source.3. The list will filter to showmatching data sources.

Filter

The Filter options lets you filter the data source table byName, Provider, and/or Description.

1. ClickFilter.2. Enter the criteria for the name, provider, and/or description you want filtered into the applicable box.

Tip: ClickFilter again to close the filter and refresh the privileges list.

Test Existing

1. Locate the row for the Data Source you wish to test.

2. Click the test icon pictured above.

Heads Up! Thiswill only test the database connection. If the data source you want to test only has the associatedservice URL, it will fail this test even if that URL is correct.

75

Updating Existing

To update an existing data source:

1. Locate the row for the Data Source you wish to edit and clickEdit (pencil icon).2. Make desired changes to the form input and then use the Test Connection button to verify the string still connects.3. ClickOK.

Import Data

This feature can be used to import an appropriately configured table (e.g., routeid, from/tomeasure, biz data, etc.) to be used in theother Transcend applications such asSegment Analyzer. You can import CSV, Excel, or Access tables.

Note: In order to use the "data import" functionality the server that TDS is running onmust have the proper "data con-nectivity components" installed. These "data connectivity components" are the drivers that allow external applications (likeTDS) to read/consumeMicrosoft office files (like Excel and Access). If the proper version of these components is notinstalled on the server, the "Import" button will remain "disabled". Once the "drivers" are installed the "import" button willbecome "enabled". The following links should be used (preference of top to bottom) to install the necessary drivers:https://www.microsoft.com/en-us/download/details.aspx?id=13255 (must use x64 for 64bit systems) or http://www.-microsoft.com/download/en/confirmation.aspx?id=23734 (this is an older 32 bit driver pack that should be used asa lastresort if the previous link doesnot work).

Usage

To import data to an existing data source:

1. Locate the row for the Data Source you to import a table to and click the Import icon.2. Check the boxbeside Include Header Row to include the header row of the table.

76

3. Drag the table (or multiple tables) into the File Import area, or click inside the File Import area and navigate to the table youwant to import.

4. Check the table(s) you want to import then clickNext.

5. For each table you are importing, in Import Table Name input boxenter the table name asyou want it displayed.

6. Uncheckany columnsyou do not want included in the import (all columnsare checked bydefault).

7. For each column in the table you are importing, enter the Import Column Name and Import Column Data Type as youwant it to be displayed.

8. ClickNext to go to the next table.

77

9. When finished editing the tables, review your selectionsand when finished click Import.

Tip: If you need tomake further edits to the tablesand/or columns, click theEdit icon in theActions column.

Export Data

This feature can be used to export a CSV file containing records from a selected data source.

Usage

To export data from an existing data source:

1. Locate the row for the Data Source you to export and click theExport icon.2. Select theVersion and Table from their respective dropdown lists.

78

3. Checkany columnsyou want to include in the export (all columnsare unchecked bydefault).

4. Optional:Click onSettings to configure the following settings:

Column Separator - enter the character the export will use to separate the columns (a comma is used bydefault)

Limit Records - to limit the number of recordsexported, check this boxand enter the number of records to export

Include Header Row - uncheck to not include the header row (this is checked bydefault)

5. ClickExport to start the export of the csv table.

Export History Table

To view the Export History table:

79

1. ClickView Export History in the upper right corner of the Export Data form.

2. Within the table, you have the following options:

Search the Table - click the search icon, then start typing the name of a job

Filter the Table - clickFilter, then enter the criteria for the job or other column you want filtered

Download a Job - click the download options icon, then select the output from the dropdown list

Delete a Job - click the trashcan icon, then clickDelete in the confirmation popup

View Job Details - clickDetails and the job's detailswill be opened

3. ClcikHide Export History to close the table and return to the Export Data form.

Delete Existing

To delete an existing data source:

1. Locate the row for the Data Source you wish to delete and click the trashcan icon.2. ClickDelete in the confirmation popup.

Note: If the users of the Data Source(s) will need tomake changes to the network and update any tables that theyare notthe owner of, your database administrator will need to ensure that theyhave editor privileges so they canmake changesto the network and update the tables.

80

LRS Metadata

LRSmetadata provides the ability to assign required LRS "semantics" to your data - such as "Route ID Field Names", "FromMeas-ure Field Names", "ToMeasure Field Names", and other LRS information, which is necessary for variousapplications to consumethe data. If your map service hasLRSmetadata exposed via LRSServer extension for ArcGISServer for a given event layer, no addi-tional LRSmetadata configuration is required for standard functionality.

If your map service doesnot have layer metadata exposed via the LRSServer extension, you'll need to add and configure any layershere that your applicationsneed to consume data from.

Usage

To start, select the data source from the dropdown that you wish to configure LRSmetadata for, then follow the instructionsbelowfor each layer option.

Metadata Details

81

If your map service has LRS metadata exposed via LRS Server extension for ArcGIS Server

1. Enter aName for your metadata details.2. Check the box for Service URL has additional LRS metadata.

Note: When this box is checked, it will notify your applications to query the LRSServer to pull and access layer metadata.

If your map service does not have LRS metadata exposed via LRS Server extension for ArcGIS Server

1. Enter aName for your metadata details.2. Insure the check the box for Service URL has additional LRS metadata is not checked.

Note: When this box is not checked, your applicationswill not query the LRSServer for layer metadata. You will need toadd any layers you wish to query in the appropriate sectionsof this tool.

Network Layers, Event Layers and Intersection Layers

For non- ArcGIS LRSServer Extension users, all layers and layer fields you want applications to have access to, must be configuredin these tabs. Remember, if you're using the LRSServer extension, layers exposed through that extension don't need to be added.However, that doesn't mean you won't have any layers configured here. For example, youmayhavemultiple network layers ortables added to themap service that aren't exposed through the extension. Those itemswould still need to be set up here.

Theminimum requirement when adding a new layer is the Network ID, layer ID, Route ID field and the FromMeasure field. Someapplicationsmayalso require additional fields to function correctly. For example, in addition to the above required fields, SegmentAnalyzer also needs to know the Table Name so it knowswhere to write the output to.

Layer Options:

Network Layers

Event Layers

Intersection Layers

To Add a New Layer

Click the tab you wish to add the layer too.

Click+Add Newor +Add New Layer Configuration to add an empty row to the list of layers.

Double click fields to enter layer details into the table.

82

ClickSave.

To Edit a Layer

Table Method

1. Double click the field you wish to edit.

2. Enter your changes.

3. ClickSave.

JSON Method

1. To open the editor, click</> in the Actions column of the row you wish to edit.

2. Click the JSON code you wish to edit, andmake your edits.

3. ClickApply.

To Delete a Layer

1. Click the tab you wish to remove the layer from.

2. ClickDelete (trashcan) in the Actions column of the row you wish to delete.

3. ClickDelete to confirm.

Advanced Editor

The Advanced Editor gives you a JSON view of all configuredmetadata layers and allowsyou to edit the raw JSON code.

1. Click the JSON code you wish to edit, andmake your edits.

2. ClickApply.

83

Import SeedData

The Import Seed Data tool allows you to import "seed" data to the configuration database using a seed file. Using this feature savesyou the step of entering in some of the configurationsmanually. If anyupdates to the original seed file aremade, you can reload itusing this tool.

UsageDrag and drop the seed data file into the box

or

Click inside the box to select the file

84

Export SeedData

The Export Seed Data tool provides the ability to export TDS, aswell as variousapplication configurations to a single seed file. Thisfeature is useful for backing up configurationsand other application settingsprior to updating or other maintenance.

Usage

Search Seed Data list

1. Click the search icon to expand the search field.

2. Start typing the name of an app or item you wish to export.

3. The list will update to showmatching items.

Export Seed Data

1. Check the items that you wish to export.

2. ClickDownload Selected to export the selected items.

Heads Up! Be sure to note the Record Count of your selected itemsprior to export. Some of the itemsavailable for exporthave a large number of recordsand for best performance it is recommended that you export/migrate those itemsdirectlythrough your database rather than using this tool.

85

Support

Server Logs - view andmanage logsgenerated by the server

Web Service Tool - execute web service calls using application security

Tip: We've added notificationmessages throughout AppManager (asall our web applications) to alert you when thereis an error or warning. The notificationswill appear on the application screen bottom left. These notification aredesigned to appear for a few seconds, then disappear on there own. However, you can hover over a notification to keepit from disappearing and also double-click a notification to close it immediately.

86

Server Logs

The Server Logs feature is a web interface that allowssystem administrators to view the server log activity and diagnose errors. TheServer Log includes the time stamp, log level, and detailedmessages from the application including a post-install-log.txt, pre-install-log.txt and a primary [app-name]-log.txt file. The saved logs from the previousdayare automatically sent to an archived folder.

87

Usage

View a log

To view the most recent log

1. Double click the log.txt file to view the server log in a Grid View.

2. You can change the view to text by clicking Text View.

3. ClickGrid View to return to the original view.

4. ClickView Details next to an item in the log to view more details.

5. ClickRefresh to refresh the log.6. ClickClose File to return to themain log directory.

To view an archived log

1. Double click the archived folder to open it.2. Double click the log.txt file to view the server log in a Grid View.

Note: You can change the view to text by clicking Text View.

3. ClickView Details next to an item in the log to view more details.

4. ClickRefresh to refresh the log.5. ClickClose File to return to themain log directory.

Search a log

88

1. Double click the log.txt file to view the server log in a Grid View.

2. Click the search icon to expand the search field.3. Start typing the name of an item in the log.

4. The list will update to show allmatching items.

Filter a log

The Filter options lets you filter the log level, times, andmessages in the log.

1. Double click the log.txt file to view the server log in a Grid View.

2. ClickFilter.3. Enter the criteria for the log level, times, and/or messages you want filtered into the applicable box.

Tip: ClickFilter again to close the filter and refresh the log.

Export a log

1. Double click the log.txt file to view the server log in a Grid View.

2. Clickhamburger icon in the top right hand corner of the grid and selectExport all data as csv from the dropdown.

3. The log will download to your computers downloads folder in csv format.

Tip: If server log doesnot download, check your browser settings to verify that pop-up blocker is not on.

Delete a log or folder

1. Right click on the log/folder you want to delete.

89

Heads Up! If you delete a log in this interface, it will be deleted in the application's server logs too.

2. ClickDelete.3. In the Confirm Delete popup, clickDelete.

Rename a log or folder

1. Right click on the log/folder you want to rename.

2. ClickRename.3. Once clicked, the report namewill become an editable field.

4. Enter your changes.

5. Click anyblank space on the page to exit editingmode.

Tip: Did youmake amistake and need to change it? Noworries. Just repeat the stepsabove.

Download a log

1. Right click on the log you want to download.

2. ClickDownload.3. The log will download to your computers downloads folder in txt format.

Tip: If server log doesnot download, check your browser settings to verify that pop-up blocker is not on.

Upload a file

1. Click the +Upload File button.2. Select the file you wish to upload.

3. ClickOpen to upload the file.

Note: You can change the logging level on theGeneralServer Settingspage.

90

Web Service Tool

TheWeb Service Tool feature enables you to execute HTTP requests against TDS.

Usage1. Enter your HTTP request in theURL input box2. Select desiredHTTP Request Method.3. For POST and PUT requests:Enter theRequest Body.4. ClickExecute.

91

Settings

Mail Server - configure settings your applicationsuse to send emails

Licensing - manage your software license

GeneralServer Settings - configure the server logging level, cache policy, expiration datesandmore

SQLCommand Settings - configure the internal application SQL queries

File Path Settings - choose where to store physical files on the server

Scheduling Service Settings - configure the storagemechanism, connection string andmore for the Job ExecutionManagerscheduler

92

Mail Server

TheMail Server feature allowsyou tomanage the default mail server you'd like your applications to use and to set a default email sub-ject line and default from email address.

Usage1. Enter your email provider's host name (also called server name) in theHostname field.2. Enter the port number used to connect to your host's server in thePort field.3. Enter the user name for your account in theUser Name field.4. Enter your account password in thePassword field.5. Enter the default subject line you wish to use in theDefault Subject field.6. Enter a default from email address in theDefault From field.

7. ClickUse SSL when sending emails if you wish to add SSL encryption to emails sent from your applications.

8. Enter a test email address in theSend Test Email field and clickSEND TEST EMAIL to test these settings. (optional)9. ClickSavewhen done.

93

Licensing

The Licensing feature provides the ability to add your software license details for all your applicationsusing a .LIC file provided to youbyTranscend.

Usage

Drag and drop the ".LIC" file we provided to you into the dashed import box to add your software license information. Once added,you'll be able to see your license ID, license type, who it's registered to, when it expires aswell as all the products and featuresincluded in your license.

94

General Server Settings

General server functionsand basic settings you'd like the server to use whenmaking calls, logging. etc. are set in the GeneralServerSettings.

Tip: If you want to hide or expand one of the sections, click the plus / minus sign at the end of the section name.

Usage

Logging and Errors

Log Level

The log level setting sets the level at which the server will write message logsand how granular the logsare written. The levels are lis-ted hierarchically based on the amount of information &messages logged, meaning that each successive levelwill include themes-sagesof the log levels below it. For example, the default setting is Info, so in addition to Infomessages,Warn, Error and Fatalmessagesare also included.

95

To Use:

1. Select the log level you wish to use from the dropdown.Options include:

Trace – very fine details and ALL logmessagesavailable will be logged

Debug – allmessages that maybe of value in order to debug and troubleshoot

Info – informationalmessagesonly

Warn – only errors and warnings

Error - (errors only)

Fatal – fatal errors only

2. ClickSave.

Heads Up! Performancemaybe impacted when using Trace or Debug due to the increased number of messages logged.

Log File Name Template

The Log File Template allowsyou to configure the layout renderer macro template used for log file names. The default is $(ma-chinename) which will use the name of themachine the process is running on in the name. You can findmore info here about the dif-ferent layout renderer macros that can be used.

To Use:

1. Enter the desired layout renderer macro following by -log.txt.

2. ClickSave.

Archived Log Location

96

The Archived Log Location setting allowsyou to configure the location and file name for archived logs. Bydefault, the logsare savedto the archived folder and namedwith the date of the log, for example: 2017-08-09.0.txt. You can findmore info here about the dif-ferent layout renderer macros that can be used.

To Use:

1. Enter the desired layout renderer macro into the curly bracesand update the folder location if desired.

2. ClickSave.

Max Log File Size (in bytes)

TheMaxLog File Size setting allowsyou to configure themaximum size a log be inmegabytes. As stated in the above image, oncethe limit is reached, the log is archived and a new log file is started.

To Use:

1. Enter the desired size limit in megabytes.

2. ClickSave.

Max Number of Logs to Keep

TheMaxNumber of Logs to Keep setting allowsyou to set amaximum number of logs to keep archived. Once the threshold ismet,the systemwill delete the oldest log file.

To Use:

1. Enter the desired number of logs to keep.

2. ClickSave.

Log Format Template

The Log Format Template setting allowsyou to configure the layout renderer macro template used for logging text files. You can findmore info here about the different layout renderer macros that can be used.

97

To Use:

1. Update the layout renderer macros in the template string.

1. ClickSave.

Data Processing

The following settingsaffect the various limits of data processing for all the applications.

Max Records to Return

The number set here represents themaxnumber of records that can be returned through a web request, at one time. Enter 0 for nolimit.

To Use:

1. Enter your desiredmaxnumber of records into the field.

Bulk Record Query Threshold

The number set here represents themaxnumber of records (or groupsof data) to query for, when processing data in chunks.

To Use:

1. Enter your desiredmaxnumber of records into the field.

Database Connection Timeout

Themaxset here determines themaxnumber of secondsa database connection will remain open before timing out. For no timeout,enter "0."

To Use:

1. Enter your desiredmaxseconds into the field.

Bulk Record Insert Threshold

98

When inserting data in bulk, the number set here determines themaxnumber of records to keep inmemorybefore committing to thedatabase.

To Use:

1. Enter your desiredmaxnumber of records into the field.

Prevent Field Quotes

Check this option if you want to prevent the system from automatically adding quotesaround database field names, when executingSQL statements.

To Use:

1. Check/uncheck the box to turn on/off.

Job Expiration Days

The number set here determines the default number of days you wish to keep job information. After the specified number of dayshasexpired the job (and anyassociated files) will be deleted. A job typically consists of exported files, reports, etc.

To Use:

1. Enter your desired default number of days to keep a job into the field.

Job Update Interval

The number set here determines the number of seconds to update the statusof a job. For example, a value of "30" will update theprogressof a long running job every 30 seconds (will update the progressof the job).

To Use:

1. Enter your desired default number of seconds in the field.

Tuning and Performance

This setting determineswhether the server can cache commonly requested resources so that it doesn't need to continuallymakerequests to the database, unlessa change is found.

To Use:

1. Check the checkbox to enable.

2. Uncheck the checkbox to disable.

Reset

The reset button can be used to reset all the general server settingsback to the defaults.

99

Heads Up! Be aware that a few other settings that are not visible in this form, such as themail server settings, will also bereset.

100

SQLCommand Settings

The applicationsmake use of manySQL statements internally that are pre-defined, yet dynamicSQL query configurations. These"parameterized queries" are expected to contain specific parameters (@SomeParamName) in order to function. It is recommendedthat these queries do not get changed, unlessa specific environment setting/configuration warrants amodification.

Themost typical change that would be required to these statements ismodifying the user/schema prefix for SDE-related objects -adding, updating or removing the prefix.

Example: ...sde.table_registry....To...dbo.table_registry...Or...table_registry...

Usage1. Click inside the text field and update the SQL statement asneeded.

2. Use the Reset button to reset all SQL statements back to the defaults.

Heads Up! It is possible that other SQL statements not listed, mayalso be reset.

101

Default SQL statements

Descrip-tion SQL Statement

Column Fil-ter:

(^Shape$)|(^Shape.Length$)|(^Geometry$)

CopyTable:

SELECT @Fields INTO @ToTable FROM @FromTable

CopyTableOracle:

CREATE TABLE @ToTable AS SELECT @Fields FROM @FromTable

CopyTableSQLCe:

CREATE TABLE @ToTable AS SELECT @Fields FROM @FromTable

CreateTable:

CREATE TABLE @TableValue (@ColumnDeclarations)

Date QueryFormatter:

'{0}'

Date QueryFormatterOracle:

TO_DATE('{0}','YYYY-MM-DD HH24:MI:SS')

DeleteRows:

DELETE FROM @TableValue WHERE @WhereClause

DropTable:

DROP TABLE @TableValue

Insert Row: INSERT INTO @TableValue (@ColumnNames) VALUES (@InsertValues)

SelectColumnInfo:

SELECT c.COLUMN_NAME, c.DATA_TYPE, c.IS_NULLABLE,c.CHARACTER_MAXIMUM_LENGTH, c.NUMERIC_PRECISION,c.NUMERIC_SCALE, c.ORDINAL_POSITION,

CASE WHEN pk.COLUMN_NAME IS NOT NULL THEN 1 ELSE 0 END AS PRIMARY_KEYFROM INFORMATION_SCHEMA.COLUMNS cLEFT JOIN (

SELECT ku.TABLE_CATALOG,ku.TABLE_SCHEMA,ku.TABLE_NAME,ku.COLUMN_NAMEFROM INFORMATION_SCHEMA.TABLE_CONSTRAINTS AS tcINNER JOIN INFORMATION_SCHEMA.KEY_COLUMN_USAGE AS kuON tc.CONSTRAINT_TYPE = 'PRIMARY KEY'AND tc.CONSTRAINT_NAME = ku.CONSTRAINT_NAME) pk

ON c.TABLE_CATALOG = pk.TABLE_CATALOGAND c.TABLE_SCHEMA = pk.TABLE_SCHEMAAND c.TABLE_NAME = pk.TABLE_NAMEAND c.COLUMN_NAME = pk.COLUMN_NAME

WHERE c.TABLE_NAME = @TableName AND c.TABLE_SCHEMA = @SchemaNameORDER BY c.COLUMN_NAME

102

SelectColumnInfo NoSchema:

SELECT c.COLUMN_NAME, c.DATA_TYPE, c.IS_NULLABLE,c.CHARACTER_MAXIMUM_LENGTH, c.NUMERIC_PRECISION,c.NUMERIC_SCALE, c.ORDINAL_POSITION,

CASE WHEN pk.COLUMN_NAME IS NOT NULL THEN 1 ELSE 0 END AS PRIMARY_KEYFROM INFORMATION_SCHEMA.COLUMNS cLEFT JOIN (

SELECT ku.TABLE_CATALOG,ku.TABLE_SCHEMA,ku.TABLE_NAME,ku.COLUMN_NAMEFROM INFORMATION_SCHEMA.TABLE_CONSTRAINTS AS tcINNER JOIN INFORMATION_SCHEMA.KEY_COLUMN_USAGE AS kuON tc.CONSTRAINT_TYPE = 'PRIMARY KEY'AND tc.CONSTRAINT_NAME = ku.CONSTRAINT_NAME) pk

ON c.TABLE_CATALOG = pk.TABLE_CATALOGAND c.TABLE_SCHEMA = pk.TABLE_SCHEMAAND c.TABLE_NAME = pk.TABLE_NAMEAND c.COLUMN_NAME = pk.COLUMN_NAME

WHERE c.TABLE_NAME = @TableNameORDER BY c.COLUMN_NAME

SelectColumnInfo NoSchemaOracle:

select c.COLUMN_NAME, c.DATA_TYPE, c.NULLABLE,c.DATA_LENGTH, c.DATA_PRECISION,c.DATA_SCALE, c.COLUMN_ID,

CASE WHEN i.COLUMN_NAME IS NOT NULL THEN 1 ELSE 0 END AS PRIMARY_KEYfrom user_tab_columns cLEFT JOIN (

SELECT cols.COLUMN_NAME, cols.TABLE_NAMEFROM all_constraints cons, all_cons_columns colsWHERE cols.table_name = UPPER(@TableName)AND cons.constraint_type in ('P')AND cons.constraint_name = cols.constraint_nameAND cons.owner = cols.owner) i

ON c.TABLE_NAME = i.TABLE_NAMEAND c.COLUMN_NAME = i.COLUMN_NAME

WHERE c.TABLE_NAME = UPPER(@TableName)ORDER BY c.COLUMN_NAME

SelectColumnInfo NoSchemaSQLCe:

select c.COLUMN_NAME, c.DATA_TYPE, c.IS_NULLABLE,c.CHARACTER_MAXIMUM_LENGTH, c.NUMERIC_PRECISION,c.NUMERIC_SCALE, i.ORDINAL_POSITION, i.PRIMARY_KEY

from INFORMATION_SCHEMA.COLUMNS cLEFT JOIN INFORMATION_SCHEMA.INDEXES iON c.TABLE_NAME = i.TABLE_NAME

AND c.COLUMN_NAME = i.COLUMN_NAMEWHERE c.TABLE_NAME = @TableName

AND c.TABLE_SCHEMA = @SchemaNameORDER BY c.COLUMN_NAME

103

SelectColumnInfo Oracle:

select c.COLUMN_NAME, c.DATA_TYPE, c.NULLABLE,c.DATA_LENGTH, c.DATA_PRECISION, c.DATA_SCALE, c.COLUMN_ID,

CASE WHEN i.COLUMN_NAME IS NOT NULL THEN 1 ELSE 0 END AS PRIMARY_KEYfrom all_tab_columns cLEFT JOIN (

SELECT cols.COLUMN_NAME, cols.TABLE_NAMEFROM all_constraints cons, all_cons_columns colsWHERE cols.table_name = UPPER(@TableName)AND cons.constraint_type in ('P')AND cons.constraint_name = cols.constraint_nameAND cons.owner = cols.owner) i

ON c.TABLE_NAME = i.TABLE_NAMEAND c.COLUMN_NAME = i.COLUMN_NAME

WHERE c.TABLE_NAME = UPPER(@TableName)AND c.OWNER = @SchemaName

ORDER BY c.COLUMN_NAME

SelectColumnInfo SQLCe:

select c.COLUMN_NAME, c.DATA_TYPE, c.IS_NULLABLE,c.CHARACTER_MAXIMUM_LENGTH, c.NUMERIC_PRECISION,c.NUMERIC_SCALE, i.ORDINAL_POSITION, i.PRIMARY_KEY

from INFORMATION_SCHEMA.COLUMNS cLEFT JOIN INFORMATION_SCHEMA.INDEXES iON c.TABLE_NAME = i.TABLE_NAME

AND c.COLUMN_NAME = i.COLUMN_NAMEWHERE c.TABLE_NAME = @TableName

AND c.TABLE_SCHEMA = @SchemaNameORDER BY c.COLUMN_NAME

SelectCount:

SELECT COUNT(*) from @TableValue where @WhereClause

SelectDistinctFromTable:

SELECT DISTINCT @Columns from @TableValue where @WhereClause

SelectFromTable:

SELECT @Columns from @TableValue where @WhereClause

SelectFrom TablePaged:

SELECT @Columns from @TableValue where @WhereClauseORDER BY @OrderBy OFFSET @OffsetRows ROWS FETCH NEXT @PageSize

ROWS ONLY

SelectFrom TablePagedOracle:

SELECT @Columns FROM (select @Columns, row_number()OVER (order by @OrderBy)rn FROM @TableValue where @WhereClauseWHERE rn BETWEEN @StartRow AND @EndRow order by rn

Select Ver-sion View:

SELECT imv_view_name FROM sde.SDE_table_registry WHERE table_name = @TableName

Select Ver-sion ViewOracle:

SELECT imv_view_name FROM sde.table_registry WHERE table_name = @TableName

Select Ver-sions:

SELECT name, owner, version_id, status, state_id,description, parent_name, parent_owner, parent_version_id, creation_time

FROM [sde].[SDE_versions]

104

Select Ver-sionsOracle:

SELECT NAME, OWNER, VERSION_ID, STATUS, STATE_ID,DESCRIPTION, PARENT_NAME, PARENT_OWNER, PARENT_VERSION_ID, CREATION_TIME

FROM sde.VERSIONS

Set VersionProc:

sde.set_current_version

Set VersionProcOracle:

sde.VERSION_UTIL.set_current_version

Set VersionProcParam:

version_name

Table Fil-ter:

|(^A[0-9])|(^D[0-9])|(^I[0-9])|(^KEYSET_)|(^REV_)|(^SDE_)|(IDX\$$)|(^GDB_)|(^DR\$)|(_evw$)|(^SDO_)|(^ST_)|(^SERVER_CONFIG$)|(^TABLE_LOCKS$)|(^DBTUNE$)|(^COLUMN_REGISTRY$)|(^GEOMETRY_COLUMNS$)|(^INSTANCES$)|(^LAYER_LOCKS$)|(^LINEAGES_MODIFIED$)|(^LOCATORS$)|(^METADATA$)|(^MBTABLES_MODIFIED$)|(^LAYERS$)|(^LINEAGES_MODIFIED$)|(^OBJECT_LOCKS$)|(^PROCESS_INFORMATION$)|(^RASTER_COLUMNS$)|(^SPATIAL_REFERENCES$)|(^STATE_LINEAGES$)|(^STATE_LOCKS$)|(^TABLE_REGISTRY$)|(^VERSION$)|(^VERSIONS$)

Table TypeFilter:

(^System$)

TruncateTable:

TRUNCATE TABLE @TableValue

UpdateRows:

UPDATE @TableValue set @ColumnNames = @UpdateValue WHERE @WhereClause

105

File Path Settings

File Pathsare pre-defined application data or storage folder locations. These pathsare expected to be relative or complete paths toa physical folder location accessible to the application. These pathsare automatically generated when AppManager and other Tran-scend applicationsare installed.With this feature you can view and edit the physical location on the server that the applicationsuse tostore anyoutput.

Usage

Edit a File Path

To edit an existing file path:

106

1. Locate the row for the File Path you wish to edit and clickEdit (pencil icon).2. Make desired changes to the form input.

3. ClickSave.

Explore a File Path

To explore an existing file path:

1. Locate the row for the File Path you wish to edit and clickExplore (folder icon).2. When finished, clickBack to List (located at the top and bottom of the page).

Upload a New File

1. Locate the row for the File Path you wish to edit and clickExplore (folder icon).2. Click theUpload File button.

3. Navigate to the file you wish to upload and clickOpen.4. The selected file will be uploaded to the selected destination.

107

Scheduling Service Settings

General settings for the Job ExecutionManager scheduler service are configured here.

Usage

Scheduling storage mechanism

The storage used to store scheduled job history details.

To Use:

1. Select the storagemechanism you wish to use from the dropdown.Options include:In Memory– will store on the app server in memorySQLite Database – will store in the SQLite DB configuredSQL Server Database – will store in the SQL Server DB configured

2. If using one of the SQL databases, enter theStorage DB connection string in the text box.

3. ClickSave.

Worker Count

The number of workers to create on each application server.

108

To Use:

1. Enter the desired number of workers.

Note: Increasing the number of workersmayeffect CPU speed

2. ClickSave.

Advanced administrator dashboard

Checking this option exposesan advanced administrator job scheduling dashboard at the specified path.

To Use:

1. Click the checkboxnext toEnable advanced administrator scheduling dashboard.2. Enter desired path to scheduler in theAdvanced admin dashboard path field.3. ClickSave.

109

Applications

Installed Applications - manage application settings

Application Profiles - create andmanage application profiles

Application Settings - manage general settingsused by the applications

Integrations - manage custom linksand external application integrations

110

Installed Applications

The Installed Applications feature allowsyou to see a list of all the applications that are currently installed. This iswhere you canchange each applications tracking code, display order and visibility on the AppsDashboard. You can also easily check if the applic-ation is licensed and howmanyprofiles the application has.

Usage

Tracking ID

This setting allowsyou to enter your tracking ID in order to send out the Google Analyticsmetrics for that application to your ID.

To Use:

1. Enter your Google Analytics tracking ID.

2. ClickSave Changes.

Order

This setting allowsyou to change the order of the applications shown on the AppsDashboard. For example, if you use the Road Ana-lyzer applicationmost frequently, you can specify it to have the order of 1 and then it will be the first application listed on the AppsDash-board.

To Use:

1. Enter an order value (from 1 - 6).

2. ClickSave Changes.

Disable Application

This setting disables the application so it is no longer visible on the AppsDashboard. This doesnot uninstall the application.

111

To Use:

1. Check the checkbox to disable visibility or uncheck the checkbox to enable visibility.

2. ClickSave Changes.

Logo Image and Logo Image Style

With these settings you can add a logo image to the top right corner of application on the AppsDashboard and have the option to addstyling for the logo using inline CSS.

To Use:

1. Enter your logo image path in the Logo Image text box.2. Optional:Enter anydesired inline CSS into the Logo Image Styling text box.3. ClickSave Changes.

112

Application Profiles

Application profiles provide the ability to createmultiple configurations for the same application. By creatingmultiple configurations(profiles) you can change defaults and application behavior to better suite the target user's needs. For example, let's say you have aPavement group, a Traffic group and an Inventory group and you'd like each group to have their own version of the application thatusesa different map service, default configurations, etc. Application Profiles gives you the flexibility to provide this functionality.

Usage

Add New

To add a new profile:

1. ClickAdd New.2. Fill in theProfile Name and ID.

Heads Up! If you are creating a new profile for HPMS Assistant, theProfile ID needs to be 10 characters or less.If the Profile ID is longer than 10 characters, the validation tablesnameswill be too long causing the validations tofail to run.

3. ClickSave.

Delete Existing

113

To delete an existing profile:

1. Click the trashcan icon to the left of the Name of the Profile you want to delete.

Edit Existing

To edit an existing profile:

1. Click the pencil icon in the Action column of the Name of the Profile you want to edit.2. Make your edit(s).

3. ClickSave.

114

Application Settings

The Application Settings feature allowsyou tomanage general settingsused by the applications such as the geometry service URLandGoogle API credentials.

Usage

General Application Settings

ArcGIS Server Geometry Service URL

TheURL set here will be used by the applications for doing geometry operations, such asprojectingmap extents.

To Use:

1. Enter the geometry service URL.

2. ClickSave.

Error Report Email

The email address set here iswhere all error messages reported byuserswill be sent.

115

Note: Individual "application profiles" can specify their own error report email addresseswhich will override this defaultrecipient address.

To Use:

1. Enter the desired email address.

2. ClickSave.

Google API

Asexplained in the GoogleMapsAPI Disclaimer, using GoogleMapsAPI components in authentication restricted applicationsrequires the purchase of the GoogleMapsAPI PremiumPlan. Once purchased, Google will supply you with a GoogleMapsAPI Cli-ent ID and aGoogleMapsAPI Key, and possibly aMapsAPI Signature and/or MapsAPI Channel to use in conjunction with the key.

To Use:

1. Enter your information in the fields provided.

2. ClickSave.

Heads Up! Per Google, youmay receive error messagesandGooglemayblock your MapsAPI access if a Google API Cli-ent ID andMapsKeyare not provided and you use theMapsAPI anyway.

Note: You can leave these fields blank if you do not plan to use theGoogleMapsAPI (Street View).

Include Geometry Service URL

Allowsyou to enter a geoprocessing service URL for the 'IncludeGeometry' geoprocessing service.

116

To Use:

1. Enter the URL to the "include geometry" geoprocessing service.

2. ClickSave.

Note: The exact name of the "include geometry" servicemayvary, depending on if the defaultswere used whenpublishing the service.

Note: To publish an ESRI Service Definition file (.sd file), refer to the ESRI documentation:http://server.arcgis.com/en/server/latest/publish-services/windows/publishing-a-service-definition-to-the-server-in-arcgis-for-desktop.htmhttp://server.arcgis.com/en/server/latest/publish-services/windows/publishing-a-service-definition-to-the-server-in-manager.htm

Stimulsoft License Key (Encrypted)

The Stimulsoft License Keyprovides full access to functionality found in the Reports tool aswell asReport Engine.

To Use:

1. Enter your Stimulsoft license key.

2. ClickSave.

Bing Maps API Key

Asexplained in BingMapsAPI licensing options, using the BingMapsAPI in authentication restricted applicationsmay require the pur-chase of the BingMapsAPI License Plan. Once purchased, Microsoft will supply you with a BingMapsAPI Key.

To Use:

1. Enter your BingMaps license key.

2. ClickSave.

ArcGIS for Portal URL

The ArcGISServer URLwill be used to authenticate applications. This is needed if you checked theService requires ArcGIS forPortal authorization option when adding a Data Source.

117

To Use:

1. Enter your ArcGISServer URL.

2. ClickSave.

Include Geometry Service URL

Enter the geoprocessing service URL for the 'IncludeGeometry' geoprocessing service. This service will add a network geometrysegment to an event attribute table.

To Use:

1. Enter your geoprocessing service URL.

2. ClickSave.

Geoprocessing Services Polling Rate

The number of milliseconds you want the service to wait between checking geoprocessing service job statuses (the service checkrate).

To Use:

1. Enter a wait time inmilliseconds.

2. ClickSave.

Geoprocessing Services Account Username

The service account usernamewhich will be used to authenticate against anygeoprocessing servicesexecuted from the server. Thisis only required if the GP service is secured.

To Use:

1. Enter the username for the account.

2. ClickSave.

Geoprocessing Services Account Password

The service account password which will be used to authenticate against anygeoprocessing servicesexecuted from the server. Thisis only required if the GP service is secured.

To Use:

118

1. Enter the password for the account.

2. ClickSave.

Map Services Account Username

The service account usernamewhich will be used to authenticate against anymap services consumed from the server. This is onlyrequired if themap service is secured.

To Use:

1. Enter the username for the account.

2. ClickSave.

Map Services Account Password

The service account password which will be used to authenticate against anymap services consumed from the server. This is onlyrequired if themap service is secured.

To Use:

1. Enter the password for the account.

2. ClickSave.

HPMS Assistant Settings

FHWA Validation Seed File Version

The version of the current seed file included for seeding the FHWAvalidations for HPMSAssistant. This value is auto populatedwhen a new version of HMPSAssistant is installed - or - the seed data is updatedmanually or by importing a new validations seed file.

HPMS Metadata Seed File Versions

TheHPMSMetadata includesall settings related to Data Groupsand Items that will be used to create data tablesand CSVs forFHWAsubmittal. TheHPMS Metadata Seed File Version (latest release) value is auto populated when the application or theseed data file is updated. TheHPMS Metadata Seed File Version (last used) value is the last version of the seed file that is cur-rently being used in HPMS Assistant.

119

When a profile in HPMSAssistant is opened, the application will automatically compare these versionsand if the version numbersdonot match, you will be notified that updatesare available.

Remove HPMS Validations on HA Profile Delete

When aHPMSAssistant profile is deleted, this setting will affect whether or not the HPMS validations created in the associated Val-idation Assistant profile are also deleted. If set to true, the validationswill be deleted. If set to false, the validationswill not be deleted.

Example: Multiple HPMSAssistant profiles are associated to the same Validation Assistant profile, then the validationsshould not be deleted, so you would enter false into this setting.

Road Analyzer Settings

Geography Filter Tolerance

When using theMyLocation option in the Search byGeography feature, the distance Road Analyzer will search for routesnear yourlocation is based on the search tolerance entered here.

To Use:

1. Enter the value inmap servicemap units.

2. ClickSave.

Map Selection Tolerance

When using themap to search for nearby routes, the distance Road Analyzer will search for routesnear the location you clicked isbased on the search tolerance entered here.

120

To Use:

1. Enter the value inmap servicemap units.

2. ClickSave.

Segment Analyzer Settings

Avoid Spaces as a Delimiter

When entering any route(s) into Segment Analyzer, ifAvoid Spaces as a Delimiter is set to "true" the Route IDswill not split or trimthe spaces in the Route Id. If your Route IDsdo not have spaces, you can enter “false” for this setting.

To Use:

1. Enter true/false.

2. ClickSave.

Column Names

The following settingsprovide the ability to override Segment Analyzer's default column names for ID, Route ID, FromMeasure andToMeasure and configure them to custom field names.

To Use:

1. Enter your information in the fields provided.

2. ClickSave.

121

Heads Up! If these settingsare changed, you will need to load and rerun anyexisting Segment Analyzer templates, thenupdate the corresponding column names in anyexisting HPMSAssistant mappingsand Validation Assistant validations.

Validation Assistant Settings

Validation Results Status Field Name

TheResultsStatusField Name allowsyou to set the name you want to use for the validation result status column.

To Use:

1. Enter the name you wish to use for the status column.

2. ClickSave.

122

Integrations

Integrationsallowsyou to add andmanage custom linksaswell as application integrations that are external to the TransportationData Server application. Integrations can be embedded or added as links that displayson AppManager's home page.

Usage

Add New

To add a new integration:

123

1. Click+ Add New to open the new Integration form.

Note: To view examplesof popular integrations, such asArcGISMap andGoogle Street View, clickExamples inthe top right corner and select the integration you would like.

2. Enter a name for the link or integration in theName field.3. Enter the URL for your external link or integration in theURL field.4. Enter a description for the link or integration in theDescription field.5. Check the boxbesideMake integration embeddable within the page to make the integration embedded within the

application. If unchecked, the integration will be a click-able external link.

6. Select the Link Opening Behavior from the dropdown. Options include:

1. Samewindow - Integration will load in the current browser window

2. New window or tab - Integration will load in a separate browser window

7. If you'd like an image or icon to display for the link or integration, enter a URL for the image in the Icon URL field. (image willdisplay inside the link as shown below)

124

Note: If no Icon URL is added, the linkwill display the link theme color selected below.

8. Click on the Link theme color selector to select a color for the link or integration. (selected color will show in the back-ground of the link icon, or behind the image if you've added an Icon URL)

9. Enter the number of horizontal blocks (1-12) you wish the link or integration to take up across the display in the LinkColumn span field.

10. You can disable the link or integration by checking theDisable integration (prevent usage) checkbox.11. ClickSave.

Change Order

To change the order of existing integrations in the Integrationsmenu:

1. Click the up or down arrow in the Actions column of the integration you want to reorder.

Update Existing

To update an existing integration:

1. Click the pencil icon in the Action column of the integration you want to update.2. Make the needed updates in the form.

3. ClickSave.

Heads Up! Disclaimer: AllGoogleMapsJavaScript API applicationsare subject to the limitationsof Google's Termsof Ser-vice. Therefore to use any imbeddedGoogleMap toolswithin the applications, you will need to adhere to Google's TermsofService - this typicallymeans you need to purchase an enterprise license. To learnmore please visit GoogleMaps' Get aKey/Authentication page.

Test Integration

125

To Test an integration:

1. Click the angled arrow icon in the Action column of the link or integration you want to test.2. The integration should open in a separate browser window.

Delete Existing

To delete an existing integration:

1. Click the trashcan icon in the Action column of the link or integration you want to delete.2. ClickDelete in the Delete Integration popup.

126

Actions

The Actions section holdsa few options that affect all the applicationsand users. Thesemaybe needed byadministratorswhenmak-ing changes that affect users or an application.

Usage

Force all users to re-authenticate

This action will require all users in their next visit to re-sign in.

Example: If you need to change the Role Privileges for a User Group and then thiswill force the application to sign every-one out so that the application has to go backand re-query their privileges.

1. Click on the Force all users to re-authenticate text.2. ClickContinue.

Note: The date will be updated on the Administration page and the Invalidate All Tokens date and time on the SecuritySettingspage.

Restart application

This action will shutdown and restart the application on the server.

Example: An application hasbeen installed but it not showing on the AppsDashboard, then this could recycle the applic-ation pool to force it to find all the applications installed.

127

1. Click on theRestart application text.2. ClickContinue.

Refresh Privileges

This action will add anymissing privileges, remove anynon-licensed (or uninstalled) privileges, prune anyduplicate privileges, andupdate privilege namesand descriptionswith the latest installed version. The number of privilegesupdated will be displayed to theright of theRefresh Privileges text. If no privilege updatesare found, it will display "0 privilegesupdated."

1. Click on theRefresh Privileges text.2. ClickRefresh.

128

I'm seeking to expandmy knowledge of ApplicationManager

You've got the fundamentals down, now's the time to explore the topics below to broaden your knowledge. The following sectionscover system requirements, application configuration and everything you need to know to get the underlying web application frame-work (.NET MVC) up and running in your environment.

Advanced Configurations

Application Architecture

Application Security

Diagnosing Installation Errors

Manual Installation

Optionsand Silent Installs

Scalability and Performance

ServicesAPI Reference

We suggest the following steps when getting started:1. Familiarize Yourself With RESTfulServices:

Representational state transfer (REST) is a style of software architecture for distributed systemssuch as theWorldWideWeb. REST hasemerged asa predominant web API designmodel. The term representational state transfer was intro-duced and defined in 2000 byRoyFielding in his doctoral dissertation. Fielding is one of the principal authors of the Hyper-text Transfer Protocol (HTTP) specification versions1.0 and 1.1. Read about RepresentationalState Transfer (REST)architectural principles and how to consumeREST services. Learnmore...

2. Consume the Services/Data:

You can easily consume endpointsmarked asa "GET" request by simply navigating to the url in your browser. Thebrowser will display the response from the service in your browser window. There aremanyclients and plug-insavailable to help construct service requests:

Chrome Advanced REST Client Plug-in

FirefoxREST Client Add-On

Fiddler

.NET REST Client

Java REST Client

129

AdvancedConfigurations

All required system-level configurationswill automatically be configured through the installation wizard. Other application settings canbe configured directly through the application'sAdministration Interface. However, under certain scenarios (uncommon), it mayberequired tomanuallymake system-level configuration changesdirectly on the application server (or servers if more than one) -rather than through the application's administration UI.

Note: If any changesaremanuallymade to the application'sweb.config file (not recommended), then those samechangeswill have to bemade after installing new versionsof the software. The existing web.config file will be overwrittenwith every installation/update. Configuration settingswill automatically be restored by the application, from the con-figuration database, upon application start.

Configuration Storage Mechanism

The application needsa place to store application configurations, user preferences, saved templates, and other session persistedinformation. The default storagemechanismwill use a “SQLCompact Edition” file database that will be located in the “App Data” dir-ectory of the application hosted on IIS.

The configuration data store, out of the box, can be configured to point to anyof the following databases:

SQLCompact Edition

SQL Server

Oracle

Note: When using an enterprise database (such asSQL Server or Oracle) asa configuration store, the data-base should be a new empty database and the connection to this database should use a database user that is theschema owner of it's own schema (a user with read/write to it's own schema only).When configuring this "Con-figuration Store" connection string, it is important to use a database user that doesnot have access to anythingoutside of this "TDS" configuration database - in order to mitigate any risk of inadvertentlymodifying or accessingother data.

130

131

Configuration for Load Balanced Environments

The application can be replicated tomultiple application servers and function in a load balanced environment, however the followingconsiderations should be taken:

The connection to the configuration databasemust have read/write permissions, in order to create objects (ONLY withinthat specific database/catalog).

The configuration databasemust be shared byall the replicated application servers, and thereforemust be an enterprisedatabase, so that all application instances can point to the same configuration store.See the Configuration StorageMech-anism section for details on changing this.

Theweb.configs, for each application instance, must be identical acrossall the applications. This can be done through theConfiguration Store component (see stepsbelow).

132

All File Path Settingsmust be pointed to a shared folder (which all TDS instances can access). The only exception is the"logs" file path.

Server-side cachingmust be turned off in the GeneralServer Settings.

Steps to follow, for setting up TDS behind a load balancer:

1. Install the first TDS instance on the first application server.

2. Navigate to the Configuration Store page under the Administration Console.

3. Check theSpecify Database check-box.4. Enter in database connection info for the enterprise configuration database, which will be shared across TDS app instances.

5. Test the connection, to make sure it is valid; the connectionmust be valid before saving.

6. ClickSave and confirm save in the confirmation popup.

1. If saved successfully, thiswill reload the page and take you back to theAdministration page.2. This process can take severalminutes, please be patient.

7. Import your license (see License section).

8. Update all of your File Path Settings to point to shared folders.

1. Example:

Change "temp" from "{{DataDirectory}}\output" to: "k:\shared_app_files\tds\output"

Change "temp" from "{{DataDirectory}}\seeding" to: "k:\shared_app_files\tds\seeding"

Change "temp" from "{{DataDirectory}}\logs" to: "k:\shared_app_files\tds\logs"

9. Make anyadditional global application configuration/settings changes.

This step is optional (see the Note at the end of this list).

10. Install TDS on the second application server - thiswill be the replicated (second) instance of the TDSapplication.

11. Navigate to the Configuration Store page under the Administration Console.

12. Check theSpecify Database check-box.13. Enter the exact same connection info that wasentered inStep 4 (connection to the enterprise configuration database).14. ClickSave (and confirm save in the confirmation popup).

If saved successfully, thiswill reload the page and take you back to theAdministration page

This process can take severalminutes, please be patient

15. Once the site has loaded you should see the same configuration settings that were set on the first TDS instance.

16. Repeat steps9 through 14 for each additional replicated instance of TDS (each additional application server behind the loadbalancer).

Note: After making anyglobal application configuration changes (things like Authentication, Roles, Role Privileges, Secur-itySettings, File Path Settings, etc) youmayneed to restart each of the TDSapplications. You can perform this restart byclicking Restart application action in the Administration Console under Actions.

IIS Authentication

When running the installation wizard, it is recommended to check the Use IntegratedWindowsAuthentication (Active Directory)option, if you plan to useWindowsAuthentication within the application. If you decide to change to or fromWindowsAuthentication(or for some reason the installer could not automatically do this for you) then you will need tomanually enable or disable AnonymousAuthentication and enable or disableWindowsAuthentication fromwithin IIS (depending on whether you are turning it on or off).

133

1. Open Internet Information Services (IIS) Manager.

2. Click on the application node.

3. Double clickAuthentication under the IIS section.4. To turn onWindowsAuthentication:

Set AnonymousAuthentication toDisabled

SetWindowsAuthentication toEnabled

5. To turn offWindowsAuthentication:

Set AnonymousAuthentication toEnabled

SetWindowsAuthentication toDisabled

6. Reload the application. You should be prompted by the browser to enter your Windowscredentials (depending on yourbrowser, youmayautomatically be authenticated).

Note: ByenablingWindowsAuthentication, within IIS, you are requiring authentication to happen at the IIS level (outsideof the actual application). To get the application to recognize the IIS authenticationmechanism, and use your Windowsaccount, youmust configure the appropriate authenticationmechanism fromwithin the application. See the Authentic-ation section for details on changing this setting.

IIS Permissions

In order for the application to be able tomake configuration changes from the user interface (UI), the built in IIS account/user (typ-ically IUSR or IIS_USRS) must have full permissionson the root directory of the application. If this is not present, then configurationchangesmade from the client side application will not be successfully persisted. This permission setting will automatically beconfigured by the installation wizard.However, if for some reason this needs to be donemanually, below are the followingsteps to set these permissions:

1. Open Internet Information Services (IIS) Manager.

2. Right click on the application node.3. ClickEdit Permissions.4. Click theSecurity tab.5. Make sure the user account/group that IIS is running under hasFullControl.

This user is typically IUSR or IIS_USRS

You can findmore information about IIS built-in user and group accounts here

IIS Application Pool Recycling

In order to run long server processeswithin the application IISmust be configured to not recycle the application pool automatically.Additionally thiswill keep the application from idling and will increase the response time of the first request to the application after nouse for an extended amount of time. These related setting will automatically be configured in IIS by the installation wiz-ard. If you aremanually deploying the application or if the installer wasunable tomake this change, they can bemadewith the fol-lowing steps:

1. Open Internet Information Services (IIS) Manager.2. Click on theApplication Pools node.3. Right click on the app pool that TDS is running under (the default is "TDSAppPool").

4. ClickAdvanced Settings.5. Under theProcess Model section, change the Idle Time-out (minutes) setting to "0."6. Under theRecycling section, changeRegular Time Interval (minutes) setting to "0."

134

Application Architecture

The "Transportation Data Server (TDS)" application is the "wrapper", server-side, application that hosts a number of supportingweb servicesand all of the client-side web applications (which consume those web services) - for example: Road Analyzer (RA), Seg-ment Analyzer (SA), Validation Assistant (VA), HPMS Assistant (HA), Road Video Viewer (RVV), etc.

TDS is typically hosted in a standard enterprise-level IT environment, with supporting LRS transactional components - such asanLRSgeodatabase andGISmap services. TDS is compatible with most LRSmodels and is often used in conjunction with Esri'sRoads&Highwaysproduct, however Roads&Highways is not required. There aremanydifferent infrastructure configurationsand envir-onments that TDS can be ran within. Below is a listing of themost common configurations:

Systems Architecture - no load balancing

This option hasno load-balancer in either the GIS or web tier. This is a fairly common architecture for Roadsand Highwaysenvir-onments. It is not necessarily a big risk in that themost performance intensive component in this stack isArcGISServer (which couldbe setup to use clustering, instead of a load balancer). Most of the "web tier" components are simple HTML/JS/CSSapplications thatdo not drastically benefit from a load balancer (unless you have hundredsof thousandsof users).

Pros:

Simple to configure and understand.

TheGIS tier (ArcGISServer) can still scale using clustering.

Uses standard configurations in both web andGIS tiers.

Cons

Theweb-tier is not easily scalable.

TheGIS-tier is not easily scalable, from a load balancer standpoint, but could scale via clustering.

135

Systems Architecture - load balanced GIS tier and non-load balanced web tier

This configuration provides load balancing for themost common "stress-point" - ArcGISServer. This configuration provides themostbenefit with the least amount of work (configuration), if a load balancer is alreadyplanned to be used.

Pros:

Simple web-tier configuration.

Easily scalable GIS-tier.

Uses standard configurations in both web andGIS tiers.

Cons

More complex configuration for GIS-tier.

Web-tier is not easily scalable (not necessarily a big deal unless you plan on having a very large user group).

136

Systems Architecture - load balanced GIS tier and load balanced web tier

This option provides themost "scalable" and fail-safe solution, but also requires themost configuration andmaintenance.

Pros:

137

Completely scalable.

Ability to do server updateswithout affecting users.

Cons

More difficult configuration.

More difficult troubleshooting and diagnostics (both web andGIS tiers).

Increasedmaintenance (more servers to run installations, backups, Event Editor configuration sync, etc).

Must use a SQLServer database asa configuration database for TDS (which each TDS instance points to).

Must have shared network folders between TDS instances (if using print or reporting capabilitywithin RA).

Heads Up! When placing TDS (the web-tier) behind a load balancer their are several configuration options that must beconsidered in order to keep themultiple instances in sync. See the "Advanced Configurations" page for details on con-figuring the application behind a load balancer.

Data Flow and Connections

Data is accessed and consumed in variousways, depending on the particular application running. The twomost typical data con-nection typeswill read data from a "Map Service" (typicallyArcGIS for Server) or bydirectly connecting to the database from TDS (through a set of secured REST services). TDS can be configured to point to manydifferent data sources, both spatial (geodata-bases) and non-spatial (standard RDBMS, no geodatabase).

138

Heads Up! It is highly recommended that the data source connection to your "TransactionalDatabase" be read-only. Youshould configure the connection to use an account that has "read-only" access to the data. Thiswillmitigate the risk of acci-dental edits or lossof important data.

139

Application Security

Application Security

All of Transcend's products provide safeguards to help prevent SQL injection attacksbymaking use of paramaterized SQL querieswithin the .NET framework.While there are safeguards in place to prevent SQL injection attacks, within Transcend's products, therecommended data accessarchitecture is intended to provide the greatest defensemechanism. Securing data access via con-nection account privilegesand application user/role/privilege assignment is critical to mitigating the risk of unintended server and data-base access. This is particularly important due to the fact that some functionality in Transcend's products do require some level ofdynamicSQL input. It is critical that only authenticated and trusted users have access to this functionality. All database connections tothe transactional data should be configured to use a read-only connection. See "Data Flow and Connections" on page 137 for moredetails.

Note: ArcGISServer does include a security option to help prevent SQL injection attacks through the use of "stand-ardized queries" functionality, which prevent the use of database-specific functionsand syntax from being used within asuppliedmap service query "where clause". This securitymeasure is turned on bydefault in ArcGISServer. More inform-ation can be found here: ArcGIS Server: About standardized queries

The application’s security policy can be configured to use a number of different authentication and authorizationmechanisms. Seethe Authentication topic for details on the supported security settingsand how to configure them, aswell as the other Security sectiontopics.

Secured Services

Application security happensat the web service level. Thismeans that authorization and authenticationmust be satisfied (based onthe configuration) for any service/endpoint to be consumed. The application usesa token-based authentication system. Thismeansthat the user will first need to provide a set of credentials to verifywho theyare. The application will take those credentials and gen-erate a token with an expiration date that can be passed byany subsequent requests to services for authentication. The applicationwill cache the token that it receivesafter “logging in” and will pass that token as “Authorization” header in the HTTP request for everyrequest made to the application services.

Data Security

In order to properly secure the data transactionsbetween the web application and the services, HTTPS (SSL) must be configuredand used on the application server. If HTTPS is not used then the HTTP traffic could potentially be “sniffed” byanyone else on the net-work.

140

Installation Errors

The following is a list of common application errors youmaysee when a component is not configured completely or correctly:

Access to the database file is not allowed

If the TDSapplication is configured to use a local configuration file (SQLCompact Edition), and the correct permissionshave notbeen set, you will see the following error message when you try to load the application:

This error can be resolved by setting “write” (full) access to the application (tds) directory for the user/group that IIS is running as (typ-ically “IUSR” and “IIS_IUSRS”). See Advanced Configuration for more information.

Retrieving LRS Metadata / An Error Occurred

Typicallywhen the “Retrieving LRSmetadata” entry in the app log showsasan error, there is a problemwith the configuredmap ser-vice. If the failed HTTP request providesamore detailedmessage, the application log will display it, otherwise it will simply log “Anerror occurred”. The following steps can be taken to diagnose this error:

1. Click the Test URL button and verify that themap service exits and you can access it.2. If you are using https, verify that you have the proper certificate for the server that themap service is hosted on.

141

3. If you have theMap Service Has LRS Capabilities option checked, verify that the LRSServer extension is enabled on themap service and that there is a network layer and event layers in themap service.

Unauthorized: Access is denied due to invalid credentials

The "Unauthorized: Access is denied due to invalid credentials" error message is typically associated with IntegratedWindowsAuthentication, within IIS, being incorrectly configured or IIS configuration being out of syncwith the application's security con-figuration.

To resolve the issue the following procedures can be followed:

If the desire is to use Windows Authentication and the application has already been configured with externalroles (AD Groups):

1. On the application server that TDS is installed, open IIS Manager.2. Navigate to the "tds" application node (click the "tds" node).

142

3. Double-click theAuthentication icon.

4. EnableWindowsAuthentication and disable all other types

5. Test the application byopening it in a browser. If it doesn't work, continue...

6. Navigate to the TDS application installation directory

This can be achieved by right-clicking the "tds" node in IIS and clickingExplore

7. Edit theWeb.config in a text editor

143

8. In the system.web tag, ensure that the "authorization" and "authentication" appear as follows:

Copy/Paste:

<authorization><deny users="?" />

</authorization><authentication mode="Windows" />

9. Save the edited "Web.Config" file.

10. Test application byopening it in a browser.

11. If the application doesn't work, move onto the "Manual reset of application authentication" steps.

Manual reset of application authentication:

1. On the application server that TDS is installed, open IISManager.

2. Navigate to the "tds" application node (click the "tds" node).

3. Double-click "Authentication" icon.

144

4. Enable "AnonymousAuthentication" and Disable all other types.

5. Navigate to the TDS application installation directory.

This can be achieved by right-clicking the "tds" node in IIS and clickingExplore

6. Edit the "Web.config" in a text editor.

7. In the system.web tag, remove anyexisting"authorization" and "authentication" tagsand add the following "authentication"tag:

Copy/Paste:

<authentication mode="None" />

>

8. Save the "Web.Config" file.

9. Open up the TDS Configuration Store database and open theSecurityConfigs table (there should only be 1 record).10. Edit theSecurityProfileId columns for the one record by setting the value to none.

11. Test the application byopening it in a browser. You should now have full access to the site and it should be configured with"No Security."

12. Go through the Authentication Configuration steps to property configure the desired TDS securitymechanism.

145

Installing TDS to a new (non-default) Website in IIS

The stepsbelow cover moving TDS from a standard "Default Web Site" IIS installation to a new non-default website in IIS.

Before migrating TDS from one website to another it is recommended to:

1. Export the current TDS configuration to a seed file (seemigrate TDS configuration store docs)

2. Make a backup of the current application and data

3. Completely uninstall all Transcend products from the respective web server (see uninstalling the application docs)

Steps:

1.) Create new website in IIS

1. Create a new website in IIS if it doesnot alreadyexist.

146

2. Fill in site details.

147

3. Ensure that the site is running.

2.) Run the TDS Installer

1. Run the TDS Installer (for the latest TDS release).

2. On the “Installation Options” wizard page, select the desired IIS Site Name.

148

3. Run through the remainder of the installation wizard stepsand complete the installation process.

4. Once the installation is complete, the application should be installed within the selected IIS Site.

3.) Verify the applications were installed

1. View the applications listed under the selected “IIS Site Name” to verify.

2. Install any remaining Transcend products on the server (example: Road Analyzer, Segment Analyzer, etc).

4.) Import the exported seed file

Once the new website is installed correctly, import the exported seed file (from the previouswebsite) to the new application which willrestore TDSback to the previous site’s application configuration.

149

Manual Installation

The stepsbelow are the typical, manual, deployment/installation steps followed to host the web application in aWindowsenvir-onment (on IIS).

Note: If you are updating the application, see theUpdating Application section below.

1) Verify Installation Requirements

Installation Requirements

2) Extract Deployment Package

The install package will contain a directory named “tds”, this is the primary deployment folder that will be used in the following steps.

3) Deploy Application to IIS

Create “tds” Application

Create a new application in IISManager called “tds” and point the “Physical path” to the “tds” directory that you copied/created in theprevious step.

Note: If youcopied the tdsdirectory directly to “C:\inetpub\wwwroot” then youonly need to

right clickon the “tds” folder in IISManagerandclickConvert to Application.

Use the “DefaultAppPool” if the default application pool is .NET 4.5 - if not youwill need to create an app

pool for .NET 4.5 and set that as the apppool for this application. After installing .NET 4.5 the default app

pool shouldautomatically be configured to use .NET 4.5.

150

Configure and Test Application

After the application is deployed, follow the remainder of the installation steps in the Getting Started section.

Updating Application

If the application hasalreadybeen deployed and you are trying to re-deploya newer version of the application, manually, the fol-lowing steps should be taken:

1. Extract deployment package.

2. Make a backup of the current application (tds directory).

3. Overwrite all of the content currently deployed (in IIS) with the contents of the "tds" directory in the deployment package.

4. Update the web.config to match your previousdeployment configuration/settings.

5. Run the application and test.

151

Options and Silent Installs

The installer can take in a number of options via the command line, in order to set default behavior and configuration – during theinstallation process.

Command Line Options

The following is a list of arguments that can be passed to the installer via command line:

1. /L*V <log file location>

a. Will tell the installer where to log its progress.

b. Note, the log path and log file must alreadybe exist.

2. APPDIR=<install directory>

a. Will tell the installer where to install the application on the target machine.

3. ENABLE_WIN_AUTH=1 or 0

a. Will tell the installer to enable windowsauthentication and disable anonymousauthentication, or not.

b. Defaults to 0.

4. LAUNCH_BROWSER=1 or 0

a. Will tell the installer to launch a browser, to the application, or not once the installation is complete.

b. Defaults to 1.

5. APP_NAME=tds

a. Will tell the installer what to “name” the application within IIS.

b. Defaults to “tds”.

6. APP_POOL_NAME=TDSAppPool

a. Will tell the installer what to name the “Application Pool” for the installed application.

b. Defaults to “TDSAppPool”.

7. /qn, /quiet

a. Will tell the installer to install “silently”.

8. Example:

a. msiexec /i <msi location> /L*V <log file location>APP_NAME=<app name>APP_POOL_NAME=<app pool name>ENABLE_WIN_AUTH=<1 or 0>

9. Working example:

a. msiexec /i "C:\deployment-package\tds.msi" /L*V "C:\ deployment-package\install-log.txt" APP_NAME=tdsAPP_POOL_NAME=MyAppPoolENABLE_WIN_AUTH=1 APPDIR="C:\Program Files (x86)\Transcend

Silent Installs

The installer can be run “silently”, meaning it will not ask for any input from the user. It will use all default values, unlessa specificoption/argument waspassed in via the command line.

/qn, /quiet

Will tell the installer to install “silently”

Example:

msiexec /i <msi location> /qn, /quiet /L*V <log file location>APPDIR=<install directory>ENABLE_WIN_AUTH=1

152

Working example:

msiexec /i "C:\deployment-package\tds.msi" /qn, /quiet /L*V "C:\ deployment-package\install-log.txt" APPDIR-R="C:\Program Files (x86)\Transcend

The installation package will contain pre-filled batch script, “silent-install.bat”, which you could add to, or edit, the arguments to passto the “msi” file. Note, if you run the installer using the “silent-install.bat” file youmust run it as an administrator.

153

Scalability and Performance

Application Performance

The application’s performance is very dependent on external factors, such asArcGISServer configuration, hardware, software, net-working, and bandwidth. The application stack ismade up of a set of RESTful servicesand a web application. The application ser-vicesdo not typically query data themselves– but instead the web application will leverage an ArcGISServer map service to querydata. See Application Architecture for more details.

Since neither the web application (simple HTML site) nor the .NET MVC application (REST services) query data themselves, thebiggest point of potential performance issues lieswithin the ArcGISServer map service. ArcGISServer performance is essential forthe web application to perform adequately. See ArcGISServer performance documentation for details.

Scalability

In order to accommodate a very large number of concurrent users, the application server (REST servicesand web app) can be rep-licated/scaled to be placed in a load-balanced environment. This “replicating” of serviceswill allow for spreading the load over mul-tiple resources. There are however a number of configuration considerations that should be taken when using "replicating" ofservices. You can find these configuration considerations in Configuration for Load Balanced Environments located in the Con-figuring the Application section.

Example Metrics

The following is a list of metrics gathered, and the hardware and software theywere performed on.

Configuration 1

Description:

Application Server (Server #1)

WindowsServer 2012

64-bit

Intel(R) Xeon(R) CPU E5-2670 v2@ 2.50GHz, 2499Mhz, 2 Core(s), 4 LogicalProcessor(s)

30.5 GBPhysicalMemory

Installed Software: ArcGISServer, ArcGISDesktop, SQL Server 2012

Configuration Database (SQLCompact Edition)

ArcGISServer (Server #2)

10.2.1

Default configuration

Database (Server #3)

Oracle

Infrastructure:

154

PerformanceMetrics:

TotalMiles LayersQueried FeaturesQueried SymbologyComplexity (1-10) TotalQuery&Render Time (seconds)

3.5 15 26 7.5 5.98

25.07 8 319 7.5 9.91

25.07 9 416 9 22.87

20 9 258 9 13.05

5 15 125 7.5 3.68

5 4 19 4 1.1

25 Concurrent UsersMetrics

155

Configuration 2

Description:

Application Server (Server #1)

WindowsServer 2012

64-bit

Intel(R) Xeon(R) CPU E5-2670 v2@ 2.50GHz, 2499Mhz, 2 Core(s), 4 LogicalProcessor(s)

30.5 GBPhysicalMemory

Installed Software: ArcGISServer, ArcGISDesktop, SQL Server 2012

Configuration Database (SQLCompact Edition)

ArcGISServer (Server #2)

10.2.1

Default configuration

Database (Server #1)

SQL Server 2012

Infrastructure:

156

PerformanceMetrics:

TotalMiles LayersQueried FeaturesQueried SymbologyComplexity (1-10) TotalQuery&Render Time (seconds)

12.525 13 40 5 1.96

3 13 103 8.5 4.39

5 13 148 148 9 3.85

18.68 13 14 4 2.07

40 4 12 2 2.09

4.662 13 15 3 1.44

25 Concurrent UsersMetrics:

157

158

Services API Reference

The ServicesAPI Reference can be accessed from theHelp dropdownmenu found in the top navigation bar and clicking on the "Ser-vicesAPI Reference" menu option.

The ServicesAPI Reference is a list of the available Transportation Data Server Web API services for most of Transcend SpatialSolutions software solutions.

159

Frequently AskedQuestions (FAQs)

What browsers does App Manager support?

Most modern web browsers like: Chrome, Firefox, Safari, and IE11+. For optimal performance, the product team recommendsusing the application in themost up to date versionsof these.

What operating systems does App Manager support?

Since AppManager is an HTML, JavaScript, and CSSweb application anyoperating systemwith amodern web browser can runAppManager – even tablets, phones, and other devices.

Does App Manager support data encryption?

Yes, the application requests/transactions can be encrypted by running over HTTPS (SSL).

Is App Manager scalable? Does it work in a load balanced environment?

AppManager can be “replicated” to multiple application servers and function in a load balanced environment. See Scalability and Per-formance for more details.

Does App Manager provide role based separation of actions?

Yes, every service endpoint and functionality in all our applicationshave an assigned privilege. Roles can be created dynamically andprivileges can be assigned to, or removed from, any role. See the Roles, Role Privileges, and User Roles sections for information onconfiguring authenticated user roles.

Is App Manager configured to use Google Analytics?

Yes, the Google tracking code can be entered into AppManager. See the Installed Applications topic under "Tracking ID" for instruc-tionson how to configure this feature.

AllGoogleMapsJavaScript API applicationsare subject to the limitationsof Google's Termsof Service. Therefore to use any imbed-dedGoogleMap toolswithin the applications, you will need to adhere to Google's Termsof Service - this typicallymeans you need topurchase an enterprise license. To learnmore, please visit GoogleMaps' Get a Key/Authentication page. Once you have that youcan enter it in the GeneralServer Settings, along with your Client ID, Signature, and/or Channel.

Can I change where TDS stores its configuration data (the config store)?

Yes, please see the Configuration Store topic for more information aswell as step-by-stepmigration instructions.

What safeguards does TDS use for database access security and protection against SQL injection and otherfunctions?

All of Transcend's products provide safeguards to help prevent SQL injection attacksbymaking use of paramaterized SQL querieswithin the .NET framework.While there are safeguards in place to prevent SQL injection attacks, within Transcend's products, therecommended data accessarchitecture is intended to provide the greatest defensemechanism. Securing data access via con-nection account privilegesand application user/role/privilege assignment is critical to mitigating the risk of unintended server and data-base access. This is particularly important due to the fact that some functionality in Transcend's products do require some level ofdynamicSQL input. It is critical that only authenticated and trusted users have access to this functionality. All database connections tothe transactional data should be configured to use a read-only connection. See ""Data Flow and Connections" on page 137" for

160

more details.

Do I need to install new releases in a particular order?

No; for example, you can upgrade from the 2ndQuarter release directly to the 4th Quarter release. It is best to install the all of latestproducts at the same time. The same applies to anypatch releases, you can directly install the patch release without installing thebase release before it. We do strongly recommendmaking a backup of the site/TDS configuration before you begin.

How do I uninstall one of the applications?

1. Navigate toPrograms in your computer.

2. ClickUninstall for the application you want to uninstall.3. ClickUninstall or Yes on the confirmation popup.4. A confirmation promptswill open. ClickOK to confirm.

See ""To uninstall the application" on page 12" under the Updating an Existing Installation heading in the Getting Started topic formore information.

Can I migrate TDS in IIS from the default website to a non-default website?

Yes, please see the Installing TDS to a newWebsite in IIS topicwhich will walk you through the processof uninstalling and backing upTDS, creating a new TDSwebsite in IIS andmigrating data from the previous install.

I'm unable to delete or update a data source, profile, etc. within the applications, how do I troubleshoot theissue?

IIS hasmanyconfigurationsandmodules that can interfere with the HTTP requests from TDSapplications to the TDS services. Typ-ically, the default IIS configuration provides the necessary setup to allow for the required HTTP traffic to route through IIS and to theTDSweb services (API). However, if certain requests (typicallyHTTPPUT or DELETE) are not being properly routed to the TDSAPI, the following steps can be used to troubleshoot the configuration issue.

Option 1 - Check and Remove WebDAV

1. OpenPrograms and Features on your computer.2. Select the Turn Windows features on or off option.3. Continue through theAdd/Remove Roleswizard until you get to the option to edit IIS features.4. Uncheck the following option found under Internet Information Services >World Wide Web Services >Common

HTTP FeaturesWebDAV Information Services

5. If the option is not checked, proceed toOption 2 below.6. ClickOK.7. Test the application to see if it resolved the issue.

Note: Youmayneed to restart the server for the change to take effect.

Option 2 - Add additional verbs to default IIS configuration

1. Navigate to the IIS applicationHost.config file.Typically located atC:\Windows\System32\inetsrv\config

2. Edit the applicationHost.config file in a text editor.3. Navigate to the system.webServer>security > requestFiltering >verbs tag.

161

4. Ensure thatPUT andDELETE are listed.

Note: If the allowUnlisted="true" property is set on the verbs tag then it is not necessary to specify “PUT” and“DELETE” explicitly.

Tip: If you do not want to apply this setting globally to IIS you canmake this configuration specifically for theTDSapplication or website. https://docs.microsoft.com/en-us/iis/-configuration/system.webserver/security/requestfiltering/verbs/add

5. Test the application to see if it resolved the issue.

Note: Youmayneed to recycle the app pool or restart IIS.